Description
Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ManageEngine | Exchange Reporter Plus | ≤ 5722 | — |
High · 8.1
CVE-2025-5966
EUVD-2025-28698GHSA-rpjg-wf34-j7pf
Stored XSS
Published Jun 26, 2025 · Updated Jun 26, 2025 · Assigned by Zohocorp