CVE-2025-8319

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter...

CVE-2025-8319

The Barracuda Message Archiver (BMA) email archiving platform is vulnerable to a DOM-based Cross-Site Scripting (XSS) attack. The vulnerability exists in the BMA login interface , where the application fails to properly sanitize the error= URL parameter. This allows an attacker to inject arbitrar...