Unrated
Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs.
CVE-2018-10948
First seen on SecPulse
References
- report bugzilla.zimbra.com