high7.2
CVE-2025-31510
In the portal in LemonLDAP::NG before 2.21.0, cross-site scripting (XSS) allows remote attackers to inject arbitrary web script or HTML (into the login page) v…
Impact
In the portal in LemonLDAP::NG before 2.21.0, cross-site scripting (XSS) allows remote attackers to inject arbitrary web script or HTML (into the login page) via the tab parameter, for Choice authentication.
Affected products
| Product | Affected versions |
|---|---|
| LemonLDAP::NG | before 2.21.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.