| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine adselfservice plus | = 4.5 |
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a different vulnerability than CVE-2010-3274.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free