Hikvision Hybrid SAN/Cluster Storage Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Hikvision Hybrid SAN/Cluster Storage, a series of affordable and reliable hybrid SAN (storage area network) products from Hikvision, China. vulnerability stems from insufficient input validation in the web module. An attacker could exploit the vulnerability by sending a message with a malicious command to conduct a cross-site scripting attack.