Unscored CVE-2021-27956 EUVD-2021-14674GHSA-9649-7hjp-5xg6

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the …

Published May 20, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field.

References

https://www.manageengine.com
https://raxis.com/blog/cve-2021-27956-manage-engine-xss
https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6104-released-with-an-important-security-fixes