Zimbra developers released the Zimbra Daffodil 10.1.19 security update to fix security vulnerability. An attacker could exploit this vulnerability to trigger cross-site scripting on the targeted system.

Users are advised to use the latest versions of Zimbra - Zimbra Daffodil 10.1.19 releases and higher.

Source: zimbra.com