CVE-2023-40535 Information

Description

Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script.

Reference

https://downloadvi.com/downloads/IPServer/v7.9/796232/v796232RN.pdf https://jvn.jp/en/jp/JVN60140221/