A vulnerability has been found in Zoho ManageEngine Exchange Reporter Plus up to 5801 and classified as problematic. Impacted is an unknown function of the component Mails Exchanged Between Users Report. The manipulation leads to cross site scripting.
This vulnerability is referenced as CVE-2026-28703. Remote exploitation of the attack is possible. No exploit is available.
The affected component should be upgraded.
