CVE-2018-10075

https://notcve.org/view.php?id=CVE-2018-10075

Cross-site scripting (XSS) vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature. Vulnerabilidad de Cross-Site Scripting (XSS) en Zoho ManageEngine EventLog Analyzer 11.12 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante la característica de importación de logs. • https://www.manageengine.com/products/eventlog/release-notes.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •