Medium severity6.1NVD Advisory· Published May 30, 2024· Updated Jun 17, 2026

CVE-2024-35432

Description

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File. An authenticated user can injection malicious JavaScript code to trigger a Cross Site Scripting.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ZKTeco/ZKBio CVSecuritydescription
Zkteco/ZKBio CVSecurity V6600llm-fuzzy
Range: =6.1.1

Patches

Vulnerability mechanics

References

github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35432.mdnvdExploit

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000