CVE-2024-35432: ZKTeco Zkbio Cvsecurity

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File. An authenticated user can injection malicious JavaScript code to trigger a Cross Site Scripting.

Affected products

• ZKTeco Zkbio Cvsecurity: version 6.1.1 only

Published 2024-05-30. Last modified 2026-06-17.