VYPR
← All advisories
Medium severity6.1OSV Advisory· Published Feb 4, 2019· Updated Jun 17, 2026

CVE-2019-7352

CVE-2019-7352

Description

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state' (aka Run State) (state.php) does no input validation to the value supplied to the 'New State' (aka newState) field, allowing an attacker to execute HTML or JavaScript code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Zoneminder/ZoneminderOSV3 versions
    1.32.3, v1.25, v1.26.0, …+ 2 more
    • (no CPE)range: 1.32.3, v1.25, v1.26.0, …
    • cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*range: <=1.32.3
    • (no CPE)range: <=1.32.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.