Description
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File. An authenticated user can injection malicious JavaScript code to trigger a Cross Site Scripting.
Medium · 6.1
CVE-2024-35432
EUVD-2024-35335
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File. An authenticated user can injection malicious …
Published May 30, 2024 · Updated Feb 13, 2025 · Assigned by mitre