Security Advisory
CVE-2018-9163
5.4
MEDIUM
Vulnerability Description
A stored Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Recovery Manager Plus before 5.3 (Build 5350) allows remote authenticated users (with Add New Technician permissions) to inject arbitrary web script or HTML via the loginName field to technicianAction.do.
Published Date
April 2, 2018
Official Source
NIST NVD Advisory