Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57836
HistoryApr 01, 2022 - 12:00 a.m.

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57836)

2022-04-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
zoneminder
video surveillance
xss
vulnerability
remote attackers
browser
exploit

EPSS

0.001

Percentile

37.8%

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and prior versions, which stems from the program not being properly filtered and could be exploited by remote attackers to execute scripts in the user’s browser.