CVE-2019-7340

2019-02-04T19:29:00
ID CVE-2019-7340
Type cve
Reporter cve@mitre.org
Modified 2019-02-05T21:25:00

Description

POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filter[Query][terms][0][val]' parameter value in the view filter (filter.php) because proper filtration is omitted.