ZOHO ManageEngine Applications Manager Cross-Site Scripting Vulnerability (CNVD-2023-64220)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao (ZOHO) company. The product has application performance management, fault management, report generation and SLA management and other functions. A cross-site scripting vulnerability exists in ZOHO ManageEngine Applications Manager. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data, which can be exploited to execute arbitrary web script or HTML by injecting a crafted payload.