VYPR
← All advisories
Medium severity6.1OSV Advisory· Published Feb 4, 2019· Updated Jun 17, 2026

CVE-2019-7331

CVE-2019-7331

Description

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named "signal check color" (monitor.php). There exists no input validation or output filtration, leaving it vulnerable to HTML Injection and an XSS attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Zoneminder/ZoneminderOSV3 versions
    1.32.3, v1.25, v1.26.0, …+ 2 more
    • (no CPE)range: 1.32.3, v1.25, v1.26.0, …
    • cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*range: <=1.32.3
    • (no CPE)range: <=1.32.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.