PT-2025-44413
CVE-2025-5343
·
Published
2025-05-29
·
Updated
2026-10-08
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:S/C:P/I:C/A:N
Name of the Vulnerable Software and Affected Versions
ManageEngine Exchange Reporter Plus versions through 5721
Description
The software is susceptible to a Stored Cross Site Scripting issue within the Instant Search functionality. The issue allows for the injection of malicious scripts that are stored on the target server and executed when other users access the affected feature.
Recommendations
Update to a version later than 5721.
Found an issue in the description? Have something to add? Feel free to write us 👾