CVE-2023-23074

Description

Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component.

Affected Platforms

Weakness Type

CWE-79, CWE-79

References

• https://bugbounty.zohocorp.com/bb/#/bug/101000006459195?tab=originator
• https://www.manageengine.com/products/service-desk/CVE-2023-23074.html
• https://bugbounty.zohocorp.com/bb/#/bug/101000006459195?tab=originator
• https://www.manageengine.com/products/service-desk/CVE-2023-23074.html