← Database

CVE-2026-28756

HIGH CVSS: 7.3 Published: 2026-04-03 Modified: 2026-07-24

Description

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report.

Affected Platforms

Zohocorp Manageengine Exchange Reporter Plus

Weakness Type

CWE-79

References