Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD.Referenceshttps://www.manageengine.com/key-manager/release-notes.html#6001https://raxis.com/blog/cve-2021-28382
