ManageEngine Exchange Reporter Plus Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in ManageEngine Exchange Reporter Plus, affecting all versions prior to 5723. The issue resides within the reports module, specifically in the 'Messages by Body Keyword' report.

Impact

Exploitation of this vulnerability allows for the execution of malicious scripts, potentially leading to unauthorized access within the application.

Remediation

Users are advised to update Exchange Reporter Plus to the latest build (5723). The latest service pack can be downloaded from the ManageEngine Exchange Reporter Plus service pack page. For assistance, contact ManageEngine product support at support@exchangereporterplus.com.