CVE:CVE-2023-38331
CNNVD:CNNVD-202307-2184
ZOHO ManageEngine SupportCenter Plus是美国卓豪（ZOHO）公司的一种基于 Web 的客户支持软件。用于让组织有效地管理客户请求、他们的帐户和联系信息、服务合同，并在此过程中提供卓越的客户体验。
ZOHO ManageEngine SupportCenter Plus 14001及之前版本存在安全漏洞，该漏洞源于products模块存在存储型跨站脚本（XSS）漏洞。
solution:Upgrade zohocorp manageengine_supportcenter_plus to a higher version than 8.0:8015,8.1:8100,8.1:8101,8.1:8102,8.1:8117,8.1:8118,8.1:8119,8.1:8121,11.0:11000,11.0:11024,11.0:11026,11.0:11027,14.0:14000,14.0:14001,and avoid the version 8.0:8015,8.1:8100,8.1:8101,8.1:8102,8.1:8117,8.1:8118,8.1:8119,8.1:8121,11.0:11000,11.0:11024,11.0:11026,11.0:11027,14.0:14000,14.0:14001