Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 contain a stored cross-site scripting (XSS) vulnerability in the reports module. This vulnerability allows an attacker with limited privileges to inject malicious scripts that can be stored and executed in the context of other users. The vulnerability has a CVSS 3.1 score of 6.3, indicating a medium severity impact with low confidentiality impact but high integrity impact. No known exploits are reported in the wild, and no official patch information is provided in the data.