Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings.
zohocorp manageengine log360
zohocorp manageengine log360 5.2