Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote malicious users to inject arbitrary web script or HTML via the "p4" field.
icewarp webclient 10.3.5