CVE-2019-7335 | BDVDB-2026-112433 Detail

Description#

Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Log Message' value on the web page without applying any proper filtration. This relates to the view=logs value.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/ZoneMinder/zoneminder/issues/2453

Exploit#

No public exploit known

History#

Version 12019-02-04Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.