High · 7.3 CVE-2026-28754 EUVD-2026-18615GHSA-3hmr-crcq-hxcv

Stored XSS Vulnerability

Published Apr 3, 2026 · Updated Apr 4, 2026 · Assigned by Zohocorp

Description

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists report.

Vendor	Product	Affected	Fixed
Zohocorp	ManageEngine Exchange Reporter Plus	< 5802	5802