Zoho ManageEngine ADManager Plus prior to 7066 allows XSS.
zohocorp manageengine admanager plus
zohocorp manageengine admanager plus 7.0