EUVD-2018-12927

Malware in sbrugna...

CVE-2018-20369: Improper Neutralization of Input During Web Page Generation

Barracuda Message Archiver 2018 has XSS in the errormsg exception-handling value for the ldapuser parameter to the cgi-mod/ldaploadentry.cgi module. The injection point of the issue is the AddUpdate module...