A stored cross-site scripting (XSS) vulnerability affects certain 1xxx series NVR (Network Video Recorder) devices due to insufficient input sanitization in functional modules. Attackers can inject malicious scripts that persist on the device backend. When administrators or users access affected pages, these stored scripts execute in their browsers. This can lead to session hijacking, unauthorized actions, or data theft. The vulnerability represents a significant security risk for network video recording infrastructure.