CVE-2007-1840: LDAP Account Manager

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS).

Affected products

• LDAP Account Manager LDAP Account Manager: up to and including 1.0_rc2

Published 2007-04-03. Last modified 2026-06-16.