CVE-2024-35432

ZKTeco ZKBio CVSecurity version 6.1.1 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation, specifically allowing an authenticated user to inject malicious JavaScript code via an audio file . Successful exploitation can tr...