medium6.1
CVE-2024-35432
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File.
Impact
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File. An authenticated user can injection malicious JavaScript code to trigger a Cross Site Scripting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zkteco | Zkbio Cvsecurity | Version 6.1.1 |