Alinto SOGo through 5.10.0 allows XSS during attachment preview.Referenceshttps://github.com/Alinto/sogo/commit/2e37e59ed140d4aee0ff2fba579ca5f83f2c5920