Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists report.CreditsC311Referenceshttps://www.manageengine.com/products/exchange-reports/advisory/CVE-2026-28754.html