Zoho ManageEngine SupportCenter Plus prior to 11020 allows Stored XSS in the request history.
zohocorp manageengine supportcenter plus 11.0
zohocorp manageengine supportcenter plus