CVE-2025-58174 | LDAPAccountManager lam up to 9.2 Profile Section profile name cross site scripting (GHSA-6gqg-wm9x-5x3m / Nessus ID 265287)

A vulnerability was found in LDAPAccountManager lam up to 9.2. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component Profile Section. Performing manipulation of the argument profile name results in cross site scripting. This vulnerability is known as CVE-2025-58174. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.