Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57805
HistoryApr 01, 2022 - 12:00 a.m.

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57805)

2022-04-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
zoneminder
cross-site scripting
vulnerability
exploitable
remote attackers
html
javascript
surveillance software

EPSS

0.001

Percentile

37.8%

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and earlier versions, which can be exploited by remote attackers with the ‘newMonitor[V4LCapturesPerFrame]’ parameter to execute HTML or JavaScript code.