Cross-site scripting (XSS) vulnerability in OpenLD before 1.1.9 and 1.1-modified before 1.1-modified3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the Search feature possibly the term parameter.