Unscored CVE-2021-46065 EUVD-2021-32767GHSA-xph7-8872-8h48

A Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine ServiceDesk Plus 11.3 Build 11306 allows an attack…

Published Jan 27, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

A Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine ServiceDesk Plus 11.3 Build 11306 allows an attackers to inject arbitrary JavaScript code.

References

https://www.manageengine.com/products/service-desk/on-premises/readme.html
https://github.com/corrupted-brain/Findings/blob/main/ManageEngine%20XSS.md