CVE-2019-7329 - Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS

Back Back to CVE browser

MEDIUM

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS

Published Feb 4, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 1.02%

Description

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://github.com/ZoneMinder/zoneminder/issues/2446
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/ZoneMinder/zoneminder/issues/2446		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 4, 2019

Updated Sep 16, 2024

Reserved Feb 4, 2019

Link CVE-2019-7329

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-7329

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-7329