CVE-2024-1706

A vulnerability was determined in ZKTeco ZKBio Access IVS up to 3.3.2. This impacts an unknown function of the component Department Name Search Bar. This manipulation with the input <marquee>hi causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor explains: "ZKBio Access IVS is no longer maintained and the product has been replaced by ZKBio CVAccess, it is recommended to replace it with the latest version of ZKBio CVAccess." This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-79
• CWE-94

• https://gist.githubusercontent.com/whiteman007/8d3a09991de4ef336937ba91c07b7856/raw/adc00538d7a8c3c54bde4797a10d9b6af393711d/gistfile1.txtThird Party Advisory
• https://vuldb.com/?ctiid.254396Permissions Required
• https://vuldb.com/?id.254396Third Party Advisory
• https://vuldb.com/?submit.280083
• https://vuldb.com/?submit.280084
• https://www.zkteco.com/en/Security_Bulletinsibs/21
• https://gist.githubusercontent.com/whiteman007/8d3a09991de4ef336937ba91c07b7856/raw/adc00538d7a8c3c54bde4797a10d9b6af393711d/gistfile1.txtThird Party Advisory
• https://vuldb.com/?ctiid.254396Permissions Required
• https://vuldb.com/?id.254396Third Party Advisory

Published

Feb 21, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1700A vulnerability, which was classified as problematic, was fo…5.4
• CVE-2024-1701A vulnerability has been found in keerti1924 PHP-MYSQL-User-…9.8
• CVE-2024-1702A vulnerability was found in keerti1924 PHP-MYSQL-User-Login…9.8
• CVE-2024-1703A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It h…5.3
• CVE-2024-1704A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It h…8.1
• CVE-2024-1705A vulnerability was found in Shopwind up to 4.6. It has been…8.1
• CVE-2024-1707A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2024-1708ConnectWise ScreenConnect 23.9.7 and prior are affected by p…8.4
• CVE-2024-1709ConnectWise ScreenConnect 23.9.7 and prior are affected by a…10
• CVE-2024-1710The Addon Library plugin for WordPress is vulnerable to unau…8.8
• CVE-2024-1711The Create by Mediavine plugin for WordPress is vulnerable t…9.8
• CVE-2024-1712The Carousel Slider WordPress plugin before 2.2.7 does not s…4.7