Zimbra developers released security updates to fix vulnerability that affects all versions of Zimbra. An attacker could exploit this vulnerability to trigger cross-site scripting on the targeted system.

Security vulnerability is fixed in the following Zimbra versions:

• Zimbra Daffodil 10.1.13

• Zimbra Daffodil 10.0.18

Source: zimbra.com