The vulnerability in the implementation of the application programming interface for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus allows a attacker to perform XSS attacks.

The vulnerability of the application programming interface for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to...

CVE-2024-47633

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoho Forms Zoho Forms zoho-forms allows Stored XSS.This issue affects Zoho Forms: from n/a through = 4.0...

CVE-2024-47633 WordPress Zoho forms plugin <= 4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zoho Forms allows Stored XSS.This issue affects Zoho Forms: from n/a through 4.0...

CVE-2024-47633 WordPress Zoho forms plugin <= 4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoho Forms Zoho Forms zoho-forms allows Stored XSS.This issue affects Zoho Forms: from n/a through = 4.0...

CVE-2024-47633

CVE-2024-47633 refers to a stored XSS in the WordPress Zoho Forms plugin (versions ≤ 4.0) due to improper input neutralization during web page generation. The vulnerability can be triggered by user-provided input that is not properly sanitized, leading to cross-site scripting in affected pages. T...

WordPress plugin Zoho Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-32691 · Zoho · Zoho Forms

Name of the Vulnerable Software and Affected Versions: Zoho Forms versions prior to 4.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in Zoho Forms. Recommendations: For versions...

CVE-2024-9100

Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path traversal...

CVE-2024-9100 Local File Inclusion

Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path traversal...

CVE-2024-9100

CVE-2024-9100 affects Zohocorp ManageEngine Analytics Plus prior to 5410 and Zoho Analytics On-Premise prior to 5410. The issue is a Path Traversal vulnerability. Public details confirm the affected versions and the underlying vulnerability class; no exploitation details are provided in the docum...

CVE-2024-9100 Local File Inclusion

Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path traversal...

ZOHO ManageEngine Analytics Plus 安全漏洞

ZOHO ManageEngine Analytics Plus is a self-service IT analytics solution from ZOHO. Get a better view of your IT data with rich visualizations and dashboards. A security vulnerability exists in ZOHO ManageEngine Analytics Plus prior to version 5410 that stems from vulnerability to path traversal...

WordPress Zoho forms plugin <= 4.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Zoho Forms versions = 4.0...

WordPress Zoho Forms Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)

Software Zoho Forms Type Plugin Vulnerable versions = 4.0 Fixed in 4.0.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47633 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID cd73af6a9904 Credits Trương Hữu Phúc truonghuuphuc Required...

WordPress Zoho Flow for WordPress plugin <= 2.7.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Zoho Flow versions = 2.7.1...

WordPress Zoho Flow for WordPress Plugin <=2.7.1 is vulnerable to SQL Injection

Software Zoho Flow for WordPress Type Plugin Vulnerable versions =2.7.1 Fixed in 2.8.1 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-47334 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 4159c647e493 Credits Trương Hữu Phúc truonghuuphuc Required...

ZOHO ManageEngine Endpoint Central 安全漏洞

ZOHO ManageEngine Endpoint Central is a desktop management system from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Endpoint Central that stems from an incorrect authorization vulnerability when isolating devices...

ZOHO ManageEngine Exchange Reporter Plus SQL注入漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A SQL injection vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus versions prior to 5715, which stems from susceptibility to SQL injection attacks...

ZOHO ManageEngine ADAudit Plus SQL Injection Vulnerability (CNVD-2024-37483)

ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. ZOHO ManageEngine ADAudit Plus prior to version 8000 suffers from a SQL injection vulnerability that can be exploited by an attacker to execute custom queries and access database...

ZOHO ManageEngine ADAudit Plus SQL Injection Vulnerability (CNVD-2024-37482)

ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. A SQL injection vulnerability exists in ZOHO ManageEngine ADAudit Plus 8000 and prior versions, which can be exploited by an attacker to execute custom queries and access database...