CVE-2019-7352 | BDVDB-2026-112450 Detail

Description#

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state' (aka Run State) (state.php) does no input validation to the value supplied to the 'New State' (aka newState) field, allowing an attacker to execute HTML or JavaScript code.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/ZoneMinder/zoneminder/issues/2475

Exploit#

No public exploit known

History#

Version 12019-02-04Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.