CVE-2019-7335

Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Log Message' value on the web page without applying any proper filtration. This relates to the view=logs value...

Linux Distros Unpatched Vulnerability : CVE-2019-7335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Lo...

CVE-2019-7335

Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Log Message' value on the web page without applying any proper filtration. This relates to the view=logs value...

CVE-2019-7335

ZoneMinder CVE-2019-7335 is a Self-Stored XSS vulnerability affecting ZoneMinder up to version 1.32.3. The issue arises from insecurely printing the Log Message value in the logs view (view=logs), enabling HTML/JavaScript execution in the page. Connected sources corroborate the vulnerability in Z...