CVE-2019-11511

CVE-2019-11511 affects Zoho ManageEngine ADSelfService Plus, with an XSS flaw exposed via the mobile app API in builds prior to 5708. The vulnerability targets the mobile API path and can lead to script execution in the context of the user’s browser session. Affected component/file is the mobile ...