In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2018-09-21T17:00:00
Updated: 2024-08-05T10:39:59.060Z
Reserved: 2018-09-12T00:00:00
Link: CVE-2018-16965

No data.

Status : Modified
Published: 2018-09-21T17:29:06.297
Modified: 2024-11-21T03:53:36.477
Link: CVE-2018-16965

No data.