Lucene search

K
cvelistMitreCVELIST:CVE-2022-30768
HistoryNov 15, 2022 - 12:00 a.m.

CVE-2022-30768

2022-11-1500:00:00
mitre
raw.githubusercontent.com
2

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.2%

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method.

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.2%