medium6.1
CVE-2023-23073
Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the purchase component.
Impact
Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the purchase component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Servicedesk Plus | Version 14.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugbounty.zohocorp.com/bb/#/bug/101000006459171?tab=originator
- https://www.manageengine.com/products/service-desk/CVE-2023-23073.html
- https://bugbounty.zohocorp.com/bb/#/bug/101000006459171?tab=originator
- https://www.manageengine.com/products/service-desk/CVE-2023-23073.html