ZOHO ManageEngine Log360 Cross-Site Scripting Vulnerability (CNVD-2021-67511)

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.A cross-site scripting vulnerability exists in ZOHO ManageEngine Log360, which stems from the failure of the LOGO_PATH field on the product settings page to verify validity of client-side data. An attacker could execute client-side code through this vulnerability.