Cross Site Scripting (XSS) in Webmail Calendar in IceWarp 10.3.1 allows remote malicious users to inject arbitrary web script or HTML via the "p4" field.
icewarp icewarp 10.3.1