CVE-2019-7349

PoC —

CVSS 3.0

6.1 medium

EPSS

<1%p57

Published

Feb 4, 2019 (Feb 4, 2019)

Modified

Jun 17, 2026

Description

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[V4LCapturesPerFrame]' parameter value in the view monitor (monitor.php) because proper filtration is omitted.

Vendors: zoneminder
Products: zoneminder
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.