CVE-2024-6523

A vulnerability was found in ZKTeco BioTime up to 9.5.2. It has been classified as problematic. Affected is an unknown function of the component system-group-add Handler. The manipulation of the argument user with the input leads to cross site scripting. It is possible to launch the attack...

CVE-2024-6523: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in ZKTeco BioTime up to 9.5.2. It has been classified as problematic. Affected is an unknown function of the component system-group-add Handler. The manipulation of the argument user with the input leads to cross site scripting. It is possible to launch the attack...

PT-2024-37688

Name of the Vulnerable Software and Affected Versions ZKTeco BioTime versions up to 9.5.2 Description A vulnerability was found in the system-group-add Handler component. The manipulation of the user argument with malicious input, such as alert'XSS', leads to cross-site scripting. This issue can ...