Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/04 12:00 a.m.•3 views

CVE-2019-7345: Improper Neutralization of Input During Web Page Generation

Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, as the view 'options' options.php does no input validation for the WEBTITLE, HOMEURL, HOMECONTENT, or WEBCONSOLEBANNER value, allowing an attacker to execute HTML or JavaScript code. This relates to functions.php...

4.8CVSS6.2AI score0.00671EPSS
SaveExploits1References2
Rows per page
Query Builder