An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/scheduleConfig.jsp file via these GET parameters: devSrc emailId excWeekModify filterFlag getFilter mailReport mset popup rep_schedule rep_Type schDesc schName schSource selectDeviceDone task val10 and val11.