Unrated
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.
CVE-2020-25729
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2020-25729 zoneminder Fixed in: 1.34.21-1
References
- advisory forums.zoneminder.com
- advisory github.com
- patch github.com