Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32296
HistorySep 30, 2021 - 5:56 a.m.

Cross-site Scripting (XSS)

2021-09-3005:56:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
zoneminder
edge
xss
vulnerability
download.php
filtration
javascript
html
software

EPSS

0.001

Percentile

37.8%

zoneminder:edge is vulnerable to cross site scripting (XSS). An attacker to execute HTML or JavaScript code via a vulnerable ‘Exportfile’ parameter value in the view download (download.php) because proper filtration is omitted.

EPSS

0.001

Percentile

37.8%