Zimbra urges customers to patch critical web client XSS flaw

The Zimbra security team urged customers to patch a critical vulnerability affecting the Classic Web Client used to access ...
The Hacker News

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

Zimbra fixes a critical stored XSS flaw in its Classic Web Client that could let crafted emails run malicious scripts when ...

Critical vulnerability makes Classic Web Client vulnerable

Users of the Zimbra Collaboration Suite web client should update quickly to fend off email-based attack attempts.
PC Magazine

client-side script

A small program that is run on the user's machine. For example, JavaScript scripts are widely used on Web pages that are executed in the client machine. Contrast with server-side script. THIS ...