An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter.
{
"extracted_events": [
{
"range": [
{
"fixed": "59cc65411f02c7e39a270fda3ecb4966d7b48d41"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:zoneminder:zoneminder:1.32.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.32.3"
},
{
"last_affected": "1.32.3"
}
],
"source": "CPE_STRING"
}
]
}