CVE-2020-25729: Zoneminder

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.

Affected products

• Zoneminder Zoneminder: before 1.34.21 (fixed in 1.34.21)

Published 2020-09-17. Last modified 2026-06-17.