← Back to browse · API

CVE-2023-23074

Severity

MEDIUM

CVSS

6.1

EPSS

0.83581

Risk score

53.65

CISA KEV

No

PoC

No

Published

2023-02-01

Modified

2025-03-27

First seen

2026-08-07

Aliases

EUVD-2023-27174, GHSA-Q84G-J4PW-HJH5

Products

n/a:n/a n/a

Sources

euvd EUVD-2023-27174

Description

Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component.

References