medium6.1
CVE-2023-23074
Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component.
Impact
Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Servicedesk Plus | Version 14.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugbounty.zohocorp.com/bb/#/bug/101000006459195?tab=originator
- https://www.manageengine.com/products/service-desk/CVE-2023-23074.html
- https://bugbounty.zohocorp.com/bb/#/bug/101000006459195?tab=originator
- https://www.manageengine.com/products/service-desk/CVE-2023-23074.html