A cross-site scripting issue has been discovered in phpLDAPadmin before 1.2.5 that allows users to store malicious values that may be executed by other users at a later time via get_request in lib/function.php.
A cross-site scripting issue has been discovered in phpLDAPadmin before 1.2.5 that allows users to store malicious values that may be executed by other users at a later time via get_request in lib/function.php.
https://github.com/leenooks/phpLDAPadmin/issues/130 https://github.com/leenooks/phpLDAPadmin/commit/c87571f6b7be15d5cd8b26381b6eb31ad03d28e2
Vulmon