Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Date added (CISA)
2022-04-19
Remediation due
2022-05-10
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML.