A vulnerability was found in Zoho ManageEngine Exchange Reporter Plus up to 5801 and classified as problematic. The affected element is an unknown function of the component Equipment Mailbox Details Report. The manipulation results in cross site scripting.
This vulnerability is identified as CVE-2026-3879. The attack can be executed remotely. There is not any exploit available.
It is suggested to upgrade the affected component.
