Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability ยท updates https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function. Added to CISA KEV on 2025-02-25. en Tue, 25 Feb 2025 00:00:00 GMT Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability: CISA added CVE-2023-34192 to the KEV catalog (due 2025-03-18). https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2023-34192 https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2023-34192#2025-02-25-cd3e81fa Tue, 25 Feb 2025 00:00:00 GMT critical <p>Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability: CISA added CVE-2023-34192 to the KEV catalog (due 2025-03-18).</p>