CVE-2018-20484

Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-12-26

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Manageengine Adselfservice Plus (Zohocorp)

References

• http://packetstormsecurity.com/files/152793/Zoho-ManageEngine-ADSelfService-Plus-5.7-Cross-Site-Scripting.html
• https://www.manageengine.com/products/self-service-password/release-notes.html