Critical Zimbra Flaw Allows Malicious Code Execution via Crafted Emails

A critical security vulnerability has been identified in the Zimbra Classic Web Client, allowing specially crafted emails to execute malicious scripts within a user's session. This stored cross-site scripting (XSS) flaw could expose mailbox information, session data, or account settings. Zimbra is urging users to apply updates to version 10.1.19 to mitigate the risk.