A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.
https://support.zabbix.com/browse/ZBX-23389
https://lists.debian.org/debian-lts-announce/2024/10/msg00000.html
https://lists.debian.org/debian-lts-announce/2024/01/msg00012.html