Medium severity5.4NVD Advisory· Published Sep 5, 2023· Updated Jun 17, 2026

CVE-2023-40705

Description

Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

i-PRO/Video Insight
cpe:2.3:a:i-pro:video_insight:*:*:*:*:*:*:*:*
Range: <7.9.6
VI Web Client/VI Web Clientllm-create
Range: <7.9.6
i-PRO Co., Ltd./VI Web Clientv5
Range: prior to 7.9.6

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN60140221/nvdThird Party Advisory
downloadvi.com/downloads/IPServer/v7.9/796232/v796232RN.pdfnvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000