Zoho ManageEngine ADAudit Plus prior to 7100 allows XSS via the username field.
zohocorp manageengine adaudit plus 7.0
zohocorp manageengine adaudit plus