#XSS

Chisato · Jul 12, 2026 · 6 min read

Zimbra Classic Web Client XSS Flaw: Patch to 10.1.19

Zimbra patched a critical stored XSS flaw in its Classic Web Client that lets crafted emails run code in a user's session. Update to 10.1.19 now.