CVE-2023-38331

MediumCVSS 5.4

Published: 28/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.89%

77th percentile - higher than 77% of all known CVEs

Zoho ManageEngine Support Center Plus version 14001 and below is vulnerable to stored XSS in the products module.

Exploitation of this vulnerability could lead to malicious code execution in users' browsers, posing a threat to the organization's data security.

It is recommended to upgrade to the latest version of the software to mitigate this vulnerability.

Original NVD description (English source)

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module.