Cross-site scripting (XSS) vulnerability on Chiyu BF-630, BF-630W, and BF-660C fingerprint access-control devices allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element.
- http://www.kb.cert.org/vuls/id/360431
No PoCs found on GitHub currently.