Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57826
HistoryApr 01, 2022 - 12:00 a.m.

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57826)

2022-04-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
zoneminder
cross-site scripting
vulnerability
video surveillance software

EPSS

0.001

Percentile

37.8%

ZoneMinder is an open source video surveillance software system. ZoneMinder 1.32.3 and earlier versions have a cross-site scripting vulnerability that stems from the fact that the program is not properly filtered and can be exploited by remote attackers with the ‘newMonitor[Method]’ parameter to execute HTML or JavaScript code with the ‘newMonitor[Method]’ parameter.