Zimbra developers released security updates to fix security vulnerabilities that affect all versions of Zimbra. An attacker could exploit some of these vulnerabilities to trigger cross-site scripting on the targeted system.

Security vulnerability is fixed in the following Zimbra versions:

• Zimbra Daffodil 10.1.5
• Zimbra Daffodil 10.0.13
• 9.0.0 P44

Source: zimbra.com