A Cross site scripting(XSS) is existing in IceWarp Webmail Server through 11.4.4.1, in /webmail/colour parameter.
/webmail/colour