Lucene search

K
cvelistMitreCVELIST:CVE-2019-7348
HistoryOct 03, 2022 - 4:19 p.m.

CVE-2019-7348

2022-10-0316:19:27
mitre
www.cve.org

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.9%

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable ‘username’ parameter value in the view user (user.php) because proper filtration is omitted.

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.9%