Launchpad.net

CVE 2019-1570

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings.

See the CVE page on Mitre.org for more details.