https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2022-27926 Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing. Added to CISA KEV on 2023-04-03. en Mon, 03 Apr 2023 00:00:00 GMT https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2022-27926 https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2022-27926#2023-04-03-c0c713ac Mon, 03 Apr 2023 00:00:00 GMT medium <p>Synacor Zimbra Collaboration Suite (ZCS): Cross-Site Scripting (XSS) (CVE-2022-27926): CISA added CVE-2022-27926 to the KEV catalog (due 2023-04-24).</p>