Zimbra 2013 has XSS in aspell.php
CVSS Score
6.1
EPSS Score
0.02
Published
2020-02-12
Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter.
CVSS Score
4.3
EPSS Score
0.041
Published
2012-02-24