Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 is vulnerable to cross-site scripting via the AJAX and html web clients.
View the template here CVE-2018-14013.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-14013.yaml
References: