NetSight
medium6.1

CVE-2021-40178

Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings.

Impact

Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings.

Affected products

VendorProductAffected versions
ZohocorpManageengine Log360
through 5.1
Version 5.2

Weakness classification

References