LDAP Account Manager Cross-Site Scripting Vulnerability

LDAP Account Manager is a Web front-end for managing entries stored in the LDAP directory (e.g., users, groups, DHCP settings.) A cross-site scripting vulnerability exists in LDAP Account Manager (LAM), which stems from the fact that the Profile Editor tool has the ability to edit profiles and the parameters on this page are not properly cleaned up. An attacker could exploit this vulnerability to execute JavaScript code on the client side.