CVE-2019-8426: Zoneminder

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter.

Affected products

• Zoneminder Zoneminder: before 1.32.3 (fixed in 1.32.3)

Published 2019-02-18. Last modified 2026-06-17.