Zimbra has urged customers to apply updates to address a critical stored cross-site scripting (XSS) vulnerability in its Classic Web Client. This flaw could allow specially crafted emails to execute malicious scripts within a user’s session, potentially leading to arbitrary code execution. The vulnerability currently lacks a CVE identifier but poses a significant risk to Zimbra Collaboration Suite users.