CVE-2025-5343

Medium · 5.4

CVSS

5.4

EPSS

0.5%

Published

Oct 30, 2025

CISA due date

—

The record

Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option.

Ecosystem	Package	Introduced	Fixed