Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32290
HistorySep 30, 2021 - 5:56 a.m.

Cross-site Scripting (XSS)

2021-09-3005:56:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
zoneminder
cross site scripting
html
javascript
filtration
vulnerability

EPSS

0.001

Percentile

37.8%

zoneminder:edge is vulnerable to cross site scripting (XSS). An attacker is able to execute HTML or JavaScript code via a vulnerable ‘show’ parameter value in the view frame (frame.php) because proper filtration is omitted.