Vulnerability in N/a

CVE-2021-46065

A Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine ServiceDesk Plus 11.3 Build 11306 allows an attackers to inject arbitrary JavaScript code.

EPSS: 0.917 (99.8th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

www.manageengine.com/products/service-desk/on-premises/readme.html (x_refsource_MISC)
github.com/corrupted-brain/Findings/blob/main/ManageEngine XSS.md (x_refsource_MISC)