Unrated severityNVD Advisory· Published Nov 5, 2013· Updated Apr 29, 2026

CVE-2013-4453

Description

Cross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account Manager (LAM) 4.3 and 4.2.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter.

Affected products

Ldapaccountmanager/LDAP Account Manager2 versions
cpe:2.3:a:ldap-account-manager:ldap_account_manager:4.2.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ldap-account-manager:ldap_account_manager:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ldap-account-manager:ldap_account_manager:4.3:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

seclists.org/oss-sec/2013/q4/149nvdPatch
sourceforge.net/p/lam/bugs/156nvdPatch
www.rusty-ice.de/advisory/advisory_2013001.txtnvdPatch
secunia.com/advisories/55413nvdVendor Advisory
bugs.debian.org/cgi-bin/bugreport.cginvd
osvdb.org/98828nvd
exchange.xforce.ibmcloud.com/vulnerabilities/88203nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000