Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57841
HistoryApr 01, 2022 - 12:00 a.m.

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57841)

2022-04-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
zoneminder
cross-site scripting
cnvd-2022-57841
video surveillance software
remote attackers
html
javascript

EPSS

0.001

Percentile

37.8%

ZoneMinder is an open source video surveillance software system. ZoneMinder 1.32.3 and earlier versions have a cross-site scripting vulnerability that stems from the fact that the program is not properly filtered and can be exploited by remote attackers to execute arbitrary HTML or JavaScript code with the ‘scale’ parameter. JavaScript code with the ‘scale’ parameter.