1 matches found
CVE-2019-7345: Improper Neutralization of Input During Web Page Generation
Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, as the view 'options' options.php does no input validation for the WEBTITLE, HOMEURL, HOMECONTENT, or WEBCONSOLEBANNER value, allowing an attacker to execute HTML or JavaScript code. This relates to functions.php...
4.8CVSS6.2AI score0.00671EPSS
SaveExploits1References2
20