CVE-2019-8426: Improper Neutralization of Input During Web Page Generation

skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControlMinTiltRange parameter...