CVE-2018-20369

Barracuda Message Archiver 2018 is affected by a Cross-Site Scripting vulnerability in the error_msg exception-handling value for the ldap_user parameter to the cgi-mod/ldap_load_entry.cgi module. The injection point is the Add_Update module. Impact per sources is client-side XSS; no exploitation...