PT-2025-46318
CVE-2025-7430
·
Published
2024-07-25
·
Updated
2025-11-21
Description by
CVSS 2.0
8.5
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:N
Name of the Vulnerable Software and Affected Versions
Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below
Description
The software contains a Stored Cross-Site Scripting (XSS) issue within the Folder Message Count and Size report. This allows for the injection of malicious scripts that can be stored and executed by other users.
Recommendations
Update Zohocorp ManageEngine Exchange Reporter Plus to a version higher than 5723.
Found an issue in the description? Have something to add? Feel free to write us 👾