{
  "cveId": "CVE-2019-7331",
  "url": "https://patchblox.com/security/cve/CVE-2019-7331",
  "summary": "CVE-2019-7331 is fixed in zoneminder on 1 platform by zoneminder 1.32.3-2ubuntu2\u002Besm1 (version 1.32.3-2ubuntu2\u002Besm1), released April 25, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "zoneminder: Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field...",
  "description": "Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named \u0022signal check color\u0022 (monitor.php). There exists no input validation or output filtration, leaving it vulnerable to HTML Injection and an XSS attack.",
  "published": "2019-02-04T11:29:00Z",
  "severity": "Medium",
  "epss": 0.009,
  "epssPercentile": 0.59814,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "zoneminder",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.32.3-2ubuntu2\u002Besm1",
      "fix": "zoneminder 1.32.3-2ubuntu2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-zoneminder-1.32.3-2ubuntu2-esm1",
      "released": "2022-04-25T21:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}