CVE-2021-40178

creationtimestamp| type| source ---|---|--- 2021-08-30 00:31:22+00:00| seen| https://t.me/cibsecurity/27988...

CVE-2021-40178

Zoho ManageEngine Log360 is affected: before Build 5224, a stored XSS exists via the LOGO_PATH field in logon settings. Root cause cited as failure to validate client-side data in LOGO_PATH. Mitigation: upgrade to Build 5224 or later (per the CVE entry). Exploitation status not specified in the p...