CVE-2024-57279

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the LDAP User Manager <= ce92321, specifically in the /setup/index.php endpoint via the returnto parameter. This vulnerability arises due to improper sanitization of user-supplied input, allowing an attacker to inject malicious JavaScript.

Published 2025-02-07. Last modified 2026-06-17.