A vulnerability was found in Zoho ManageEngine Exchange Reporter Plus up to 5801. It has been declared as problematic. This affects an unknown function of the component Folder Message Report. Such manipulation leads to cross site scripting.
This vulnerability is listed as CVE-2026-4107. The attack may be performed from remote. There is no available exploit.
It is recommended to upgrade the affected component.
