description: ZTE's big video business platform has two reflective cross-site scripting (XSS) vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the parameters, to affect the operations of valid users. This affects: <ZXIPTV><ZXIPTV-EAS_PV5.06.04.09>
problem types: XSS
affected:
{
product: <ZXIPTV>
vendor: n/a
versions:
status: affected, version: <ZXIPTV-EAS_PV5.06.04.09>
}