An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter.
{ "source": "REFERENCES" }
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-6777.json"
{ "cpe": "cpe:2.3:a:zoneminder:zoneminder:1.32.3:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "1.32.3" }, { "last_affected": "1.32.3" } ], "source": "CPE_STRING" }