CVE-2019-7341

2019-02-04T19:29:00
ID CVE-2019-7341
Type cve
Reporter cve@mitre.org
Modified 2019-02-05T21:26:00

Description

Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[LinkedMonitors]' parameter value in the view monitor (monitor.php) because proper filtration is omitted.