CVE-2019-8426

skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControlMinTiltRange parameter...

CVE-2019-8426

ZoneMinder before 1.32.3 is affected by a cross-site scripting (XSS) vulnerability in skins/classic/views/controlcap.php via the newControl array, demonstrated by newControl[MinTiltRange]. Exploitation would occur in the browser of a user who visits a page that processes this parameter. The issue...