CVE-2021-27956

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field

published May 20, 2021

CVSS
—
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01606 · 75.7th percentile
Published
2021-05-20T17:55Z
EPSS history
Timeline
  • 20 MAY 17:55Z
    Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field
    cvelistv5