Zimbra has released its Daffodil v10.1.19 patch update, addressing a stored cross-site scripting (XSS) vulnerability in the platform’s Classic Web Client. The security issue could allow a specially crafted email message to execute malicious JavaScript within the context of a logged-in recipient’s webmail session. The update, released on July 7, 2026, includes fixes delivered through […]

The post Zimbra Releases Security Patch for Stored XSS Vulnerability in Classic Web Client appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Eswar

Source: gbHackers
Source Link: https://gbhackers.com/zimbra-releases-security-patch-stored-xss/