Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-7331
HistoryFeb 04, 2019 - 7:29 p.m.

Cross site scripting

2019-02-0419:29:00
PRIOn knowledge base
www.prio-n.com
8

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.1%

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named “signal check color” (monitor.php). There exists no input validation or output filtration, leaving it vulnerable to HTML Injection and an XSS attack.

CPENameOperatorVersion
zoneminderle1.32.3

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.1%