Noah-Lab

**Name of the Vulnerable Software and Affected Versions** Zimbra ZCS version 8.8.15 **Description** The issue is a Cross Site Scripting vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the "/h/autoSaveDraft" function. This vulnerability is actively exploited by hackers. **Recommendations** For Zimbra ZCS version 8.8.15, consider disabling the `/h/autoSaveDraft` function as a temporary workaround until a patch is available. Restrict access to this function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.