Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 and earlier allows remote authenticated users with permissions to add new vendors to inject arbitrary. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
XSS
Zoho
Manageengine Assetexplorer
Zohocorp
NVD
CVSS 2.0
3.5
EPSS
0.3%