In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog (aka the communication log administration view).Referenceshttps://www.znuny.org/en/advisories/zsa-2026-10
