PT-2018-17155

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions prior to 9403 Description: The issue allows an attacker to run arbitrary JavaScript via the "api/request/?OPERATION NAME=" API endpoint. Recommendations: For versions prior to 9403, update to versio...