| Package | Affected versions | Patched versions |
|---|---|---|
| zoneminder | ≤ 1.32.3 |
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free