EPSS
Percentile
37.8%
zoneminder is vulnerable to cross-site scripting. The vulnerability exists due to a lack of input validation to the value supplied to the ‘New State’ (aka newState) field, allowing an attacker to execute HTML or JavaScript code.
github.com/ZoneMinder/zoneminder/issues/2475
secdb.alpinelinux.org/edge/community.yaml