A vulnerability was found in Zoho ManageEngine Exchange Reporter Plus up to 5801. It has been rated as problematic. This impacts an unknown function of the component Permissions Based on Mailboxes Report. Performing a manipulation results in cross site scripting.
This vulnerability is cataloged as CVE-2026-27655. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.
