Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra.
- https://bugzilla.zimbra.com/show_bug.cgi?id=101435
No PoCs found on GitHub currently.