XSS in Web2ldap

CVE-2013-7258

Cross-site scripting (XSS) vulnerability in web2ldap 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "displaying group DN and entry data in group administration UI."

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.014 (70.3th percentile) — read the EPSS interpretation.

Affected products

Web2ldap — versions 1.1.40, 1.1.41, 1.1.42
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)