Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Folder-wise read mails with subject report.
No PoCs from references.
- https://github.com/fkie-cad/nvd-json-data-feeds