A vulnerability marked as problematic has been reported in Zoho ManageEngine Exchange Reporter Plus up to 5723. Impacted is an unknown function of the component Custom Report. The manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2025-7633. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.