Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32282
HistorySep 30, 2021 - 4:50 a.m.

Cross-site Scripting (XSS)

2021-09-3004:50:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
zoneminder
xss
vulnerability
plugin.php
web
parameter

EPSS

0.001

Percentile

32.7%

ZoneMinder is vulnerable to cross-site scripting. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter.