A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.