CVE-2019-7352

PoC —

CVSS 3.0

6.1 medium

EPSS

<1%p58

Published

Feb 4, 2019 (Feb 4, 2019)

Modified

Jun 17, 2026

Description

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state' (aka Run State) (state.php) does no input validation to the value supplied to the 'New State' (aka newState) field, allowing an attacker to execute HTML or JavaScript code.

Vendors: zoneminder
Products: zoneminder
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.