CVE-2025-8319

CVE-2025-8319 affects Barracuda Message Archiver (BMA) where the login interface permits arbitrary JavaScript/HTML to be written into the page’s DOM via the error= URL parameter, enabling cross-site scripting (XSS). The issue is triggered by the error parameter and involves the BMA web interface,...