Medium · 6.1 CVE-2023-23077 EUVD-2023-27177GHSA-pmvq-4gg6-p4px

Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 13 via the comment field when adding a new status comment.

Published Feb 1, 2023 · Updated Mar 27, 2025 · Assigned by mitre

Description

Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 13 via the comment field when adding a new status comment.

Advisories 1

WID-SEC-2023-0254 Zoho ManageEngine ServiceDesk Plus: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Feb 1, 2023

References