CVE-2026-51133 — Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component

Back Back to CVE browser

MEDIUM

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component

Published Sep 15, 2026

6.1

MEDIUM

CVSS 3.1

EPSS 0.91%

Description

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component

Affected products

Remediation

No remediation recorded yet.

Metrics

0.91% 0.00914

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00914

Score over time

Sep–Oct 2026

EPSS v5

Percentile over time

EPSS v5

Table of values (2 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.91% (0.00914)	58.65th	v5 (v2026.06.15)
Sep 16, 2026	0.89% (0.00893)	57.70th	v5 (v2026.06.15)

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Link	Providers	Tags
https://albcyberguards.com/blog/cve-2026-51133-c-mor-cross-site-scripting		exploit
https://www.c-mor.com/video-surveillance-info/video-surveillance-change-log