High · 7.3 CVE-2026-4108 EUVD-2026-18627GHSA-hmvm-5r4j-5wx3

Stored XSS Vulnerability

Published Apr 3, 2026 · Updated Apr 4, 2026 · Assigned by Zohocorp

Description

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Permission report.

Vendor	Product	Affected	Fixed
Zohocorp	ManageEngine Exchange Reporter Plus	< 5802	5802