CVE-2026-42366

High

Published: 04/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 version 1.10. A specially crafted malicious URL can lead to arbitrary JavaScript code execution.

Risk Assessment

An attacker can exploit this vulnerability to execute malicious code in the victim's browser context, potentially leading to data theft or session hijacking.

Recommendation

It is recommended to update the software to the latest version and implement input sanitization filters to prevent XSS attacks.

Other vulnerabilities in GeoVision LPC2011/LPC2211 1.10

CVE-2026-7371High
Multiple reflected cross-site scripting (XSS) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 version 1.10. A specially crafted malicious URL can lead to arbitrary JavaScript code execution.

Original NVD description (English source)

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.