CVE-2005-1800

2005-06-0104:00:00

mitre

www.cve.org

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.1%

JSON

Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php.

References

lists.grok.org.uk/pipermail/full-disclosure/2005-May/034354.html

www.securityfocus.com/bid/13796