Field Assessment
AI analysis pending.
CVE
CVE-2007-1840
Severity
MEDIUM
CVSS
4.3
EPSS
1.32%
Original Filing — NVD Description
lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS).