CVE-2025-66376
HIGH
CVSS: 7.2
EPSS: 19.6%
VulnCheck KEV
PoC Available
CWE-79
T1189
Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import directives in an HTML e-mail message.
Published: 2026-01-05