Medium · 6.1 CVE-2023-23074 EUVD-2023-27174GHSA-q84g-j4pw-hjh5

Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component.

Published Feb 1, 2023 · Updated Mar 27, 2025 · Assigned by mitre

Description

Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component.

Advisories 1

WID-SEC-2023-0254 Zoho ManageEngine ServiceDesk Plus: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Feb 1, 2023

References