← Database

CVE-2022-24681

MEDIUM CVSS: 6.1 Published: 2022-04-07 Modified: 2026-06-17

Description

Zoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the Reset Password, Unlock Account, or User Must Change Password screen.

Affected Platforms

Zohocorp Manageengine Adselfservice Plus

Weakness Type

CWE-79

References