CVE-2025-5347

Medium · 5.4

CVSS

5.4

EPSS

0.5%

Published

Oct 30, 2025

CISA due date

—

The record

Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module.

Ecosystem	Package	Introduced	Fixed