Stored XSS Vulnerability in ManageEngine Exchange Reporter Plus by Zohocorp

CVE-2025-5966

What is CVE-2025-5966?

ManageEngine Exchange Reporter Plus versions up to 5722 are susceptible to a Stored XSS vulnerability through the 'Attachments by Filename' report feature. Attackers could exploit this weakness to inject malicious scripts, potentially compromising user data and leading to unauthorized actions within the application. It is crucial for users of these affected versions to implement necessary security measures and updates to prevent exploitation.

References