High · 7.3 CVE-2026-27655 EUVD-2026-18631

Stored XSS Vulnerability

Published Apr 3, 2026 · Updated Apr 4, 2026 · Assigned by Zohocorp

Description

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report.

Vendor	Product	Affected	Fixed
Zohocorp	ManageEngine Exchange Reporter Plus	< 5802	5802