CVE-2024-35432

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an audio file. An authenticated user can inject malicious JavaScript to trigger the XSS. Affected component is the CVSecurity web/UI layer handling audio input; root cause is improper handling/ sanitization of audio-fil...