#XSS

Zimbra Patches Critical Webmail Flaw That Lets Booby-Trapped Emails Run Code

A stored cross-site scripting bug in Zimbra's Classic Web Client can hijack a user's session the moment a rigged email is opened.