The Zimbra security team urged customers to patch a critical vulnerability affecting the Classic Web Client used to access the Zimbra Collaboration suite. [...]
Zimbra urges customers to patch critical web client XSS flaw
Summary + source link. No paywalls, no tracking.