Zoho ZeptoMail Cross-Site Request Forgery Vulnerability Leading to Stored Cross-Site Scripting

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Zoho ZeptoMail, specifically in versions prior to 3.3.1. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where malicious scripts can be injected and executed within the user's browser.

Impact

Exploitation of this vulnerability allows for Cross-Site Request Forgery, which can lead to Stored Cross-Site Scripting. This means that an attacker could trick a user into performing actions that result in the injection of malicious scripts, which are then stored and executed in the context of the user.