ADManager Plus is a simple, easy-to-use Windows Active Directory Management and Reporting Solution that helps AD Administrators and Help Desk Technicians with their day-to-day activities.
ADManager Plus suffers from multiple XSS vulnerabilities when parsing user input to the 'domainName' parameter in the '/jsp/AddDC.jsp' script via GET method and 'operation' parameter in the '/DomainConfig.do' script via POST method. Attackers can exploit these weaknesses to execute arbitrary HTML and script code in a user's browser session.