Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

A critical cross-site scripting (XSS) vulnerability in Zimbra's Classic Web Client could allow attackers to execute malicious code through crafted emails, potentially leading to account compromise and data theft. Zimbra urges users to update to version 10.1.19 to mitigate the risk, following a history of XSS exploitati…