Zoho ManageEngine ADSelfService Plus prior to 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
zohocorp manageengine adselfservice plus |
||
zohocorp manageengine adselfservice plus 6.1 |