Total vulnerabilities in the database
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.
CVSS v3:
CVSS v2:
CWEs:
OWASP TOP 10: