Vulnerabilities > Zohocorp > Manageengine Servicedesk Plus MSP > 14.5

DATE CVE VULNERABILITY TITLE RISK
2024-01-18 CVE-2023-49943 Cross-site Scripting vulnerability in Zohocorp Manageengine Servicedesk Plus MSP
Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged technician) via a task's name in a time sheet.
network
low complexity
zohocorp CWE-79
5.4