CVEs-PoC/2021/CVE-2021-27956.md

CVE-2021-27956

Description

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field.

POC

Reference

• https://raxis.com/blog/cve-2021-27956-manage-engine-xss
• https://raxis.com/blog/cve-2021-27956-manage-engine-xss
• https://www.manageengine.com
• https://www.manageengine.com

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/k0pak4/k0pak4