High · 7.3 CVE-2026-28756 EUVD-2026-18619GHSA-4g8c-fcmg-72qf

Stored XSS Vulnerability

Published Apr 3, 2026 · Updated Apr 4, 2026 · Assigned by Zohocorp

Description

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report.

Vendor	Product	Affected	Fixed
Zohocorp	ManageEngine Exchange Reporter Plus	< 5802	5802