https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:36:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-07576 bdu:2025-07576 https://cve.radiocsirt.org/vuln/bdu:2025-07576 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0172 certfr-2024-avi-0172 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0172 https://cve.radiocsirt.org/vuln/euvd-2026-255618 EUVD-2026-255618 https://cve.radiocsirt.org/vuln/euvd-2026-255618 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27443 <p>An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim&#39;s session, potentially leading to execution of arbitrary JavaScript code.</p> <p>An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim&#39;s session, potentially leading to execution of arbitrary JavaScript code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27443 https://cve.radiocsirt.org/vuln/ghsa-qrvg-mg33-q843 <p>An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim&#39;s session, potentially leading to execution of arbitrary JavaScript code.</p> <p>An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this via an email message containing a crafted calendar header with an embedded XSS payload. When a victim views this message in the Zimbra webmail classic interface, the payload is executed in the context of the victim&#39;s session, potentially leading to execution of arbitrary JavaScript code.</p> https://cve.radiocsirt.org/vuln/ghsa-qrvg-mg33-q843 https://cve.radiocsirt.org/vuln/gsd-2024-27443 gsd-2024-27443 https://cve.radiocsirt.org/vuln/gsd-2024-27443