Barracuda Barracuda Message Archiver

• CVE-2025-8319 Medium 6.1 the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter 0.3%