CVE-2026-10632 - Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameter
CVE ID :CVE-2026-10632 Published : Oct. 23, 2026, 2:17 p.m. | 1 hour, 57 minutes ago Description :A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an attacker to inject JavaScript through the packages parameter of the /h/rest...