CVE-2024-27314

LOW Year: 2024
CVSS v3 Score
2.4
Low
Weakness Type
CWE-79
View all →

Vulnerability Description

Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable to stored XSS in the Custom Actions menu on the request details. This vulnerability can be exploited only by the SDAdmin role users.

Related Vulnerabilities

CVE-2019-11281

LOW
CVSS:2.4(Low)

Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the v...

CWE-792019

CVE-2022-0986

LOW
CVSS:2.4(Low)

Reflected Cross-site Scripting (XSS) Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.11.

CWE-792022

CVE-2023-0676

LOW
CVSS:2.4(Low)

Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1.

CWE-792023

CVE-2023-7259

MEDIUM
CVSS:2.4(Low)

** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This affects an unknown part of the component Adduser Page. The manipulation of the ...

CWE-792023

CVE-2024-10477

MEDIUM
CVSS:2.4(Low)

A vulnerability classified as problematic was found in LinZhaoguan pb-cms up to 2.0.1. This vulnerability affects unknown code of the file /admin#permissions of the component Permission Management Pag...

CWE-792024

CVE-2024-10478

MEDIUM
CVSS:2.4(Low)

A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms up to 2.0.1. This issue affects some unknown processing of the file /admin#article/edit?id=2 of the component...

CWE-792024