CVE-2026-7371

High

Published: 04/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 version 1.10. A specially crafted malicious URL can lead to arbitrary JavaScript code execution.

Risk Assessment

An attacker can exploit this vulnerability to execute unauthorized code in users' browsers, potentially leading to data theft or session hijacking.

Recommendation

It is recommended to update the software to the latest version and implement filters to protect against XSS attacks.

Other vulnerabilities in GeoVision LPC2011/LPC2211 1.10

CVE-2026-42366High
Multiple reflected cross-site scripting (XSS) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 version 1.10. A specially crafted malicious URL can lead to arbitrary JavaScript code execution.

Original NVD description (English source)

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability. Reflected XXS via the error message for requesting non-existing page.