Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability ยท updates https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2024-27443 Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the CalendarInvite feature of the Zimbra webmail classic user interface. An attacker can exploit this vulnerability via an email message containing a crafted calendar header, leading to the execution of arbitrary JavaScript code. Added to CISA KEV on 2025-05-19. en Mon, 19 May 2025 00:00:00 GMT Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability: CISA added CVE-2024-27443 to the KEV catalog (due 2025-06-09). https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2024-27443 https://pwn.watch/i/synacor-zimbra-collaboration-suite-zcs-cve-2024-27443#2025-05-19-d15f9139 Mon, 19 May 2025 00:00:00 GMT medium <p>Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability: CISA added CVE-2024-27443 to the KEV catalog (due 2025-06-09).</p>