CVE-2019-8425: Zoneminder

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages.

Affected products

• Zoneminder Zoneminder: before 1.32.3 (fixed in 1.32.3)

Published 2019-02-18. Last modified 2026-06-17.