Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report.

Published Jan 6, 2021 · Updated Aug 5, 2024 · Assigned by mitre