Skip to content
The Nexus
DossierENTITY

stored cross-site scripting (XSS)

Coverage of stored cross-site scripting (XSS) in the Nexus archive.

Earliest in view: Jul 11 · 06:45 UTCMost recent: Jul 11 · 06:45 UTC
Co-mentioned in this coverage
Zimbraorganization1Classic Web Clienttopic1arbitrary code executiontopic1
Recent coverage
  • SECURITYJul 11 · 06:45 UTCTHE HACKER NEWS
    Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

    Zimbra is urging customers to apply updates to address a critical security vulnerability in the Classic Web Client that could allow arbitrary code execution via stored cross-site scripting (XSS). The flaw could enable malicious scripts to run in user sessions through specially crafted emails and has not yet been assigned a CVE identifier.

stored cross-site scripting (XSS) · Dossier · The Nexus