Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.