phpLDAPadmin lib/QueryRender.php base Parameter XSS

The version of phpLDAPadmin on the remote host fails to properly sanitize the base parameter of 'lib/QueryRender.php' script before using it to generate dynamic HTML. By tricking someone into clicking on a specially crafted link, an attacker may be able exploit this to inject arbitrary HTML and...