HIGHCVSS 7.2KNOWN EXPLOITED

CVE-2025-66376

CVE-2025-66376 updated by NVD

Published: 2026-03-18
Modified: 2026-11-04
Sources: cisa-kev, nvd

Summary

Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import directives in an HTML e-mail message.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-66376

Includes data from the CISA Known Exploited Vulnerabilities catalog.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.