In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.Referenceshttps://www.znuny.org/en/advisories/zsa-2026-11