Zoho ManageEngine ADSelfService Plus跨站脚本漏洞

ZOHO ManageEngine ADSelfService Plus, an integrated self-service password management and single sign-on solution for Active Directory and cloud applications from ZOHO, is vulnerable to cross-site scripting. A cross-site scripting vulnerability exists in Zoho ManageEngine ADSelfService Plus, which can be exploited by attackers to perform blind HTTP requests or cross-site scripting (XSS) attacks against the management interface via HTTP requests.