Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below contain a stored cross-site scripting (XSS) vulnerability in the Public Folders report feature. This vulnerability allows an attacker with limited privileges to inject malicious scripts that can execute in the context of other users. The vulnerability has a high severity score of 7.3 according to CVSS 3.1, indicating significant impact on confidentiality and integrity but no impact on availability. No patch or remediation information is provided in the available data.