A vulnerability was found in Zoho ManageEngine Exchange Reporter Plus up to 5801. It has been classified as problematic. The impacted element is an unknown function of the component Public Folder Client Permissions Report. This manipulation causes cross site scripting.
This vulnerability is tracked as CVE-2026-3880. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is recommended.
