Cross-site Scripting (XSS)

zoneminder is vulnerable to cross-site scripting. The vulnerability exists due to a lack of input validation to the value supplied to the 'New State' aka newState field, allowing an attacker to execute HTML or JavaScript code...