High · 7.3 CVE-2026-3880 EUVD-2026-18623GHSA-55qr-4rc4-w5vg

Stored XSS Vulnerability

Published Apr 3, 2026 · Updated Apr 4, 2026 · Assigned by Zohocorp

Description

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report.

Vendor	Product	Affected	Fixed
Zohocorp	ManageEngine Exchange Reporter Plus	< 5802	5802