CVE-2024-35432

n/a / n/a PUBLISHED

Description (CNA)

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File. An authenticated user can injection malicious JavaScript code to trigger a Cross Site Scripting.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35432.md

ADP enrichment

CVE

No English description supplied.

https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35432.md

CISA-ADP

No English description supplied.

No references supplied.