Medium · 6.1 CVE-2023-23073 EUVD-2023-27173GHSA-hr44-hqgh-6mf2

Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the purchase component.

Published Feb 1, 2023 · Updated Mar 27, 2025 · Assigned by mitre

Description

Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the purchase component.

Advisories 1

WID-SEC-2023-0254 Zoho ManageEngine ServiceDesk Plus: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Feb 1, 2023

References