Security Advisory

CVE-2024-35432

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-30 16:05:05

Last updated 2025-02-13 15:58:47

Assigner mitre

State PUBLISHED

Description

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File. An authenticated user can injection malicious JavaScript code to trigger a Cross Site Scripting.

← Browse all CVEs View on cve.org ↗