CVE-2005-2042

The CVE-2005-2042 entry concerns an XSS vulnerability in ajax-spell prior to 1.8. The issue arises from allowing injection of arbitrary script/HTML via event handlers (e.g., onmouseover) in HTML tags, enabling remote attacker-controlled script execution. Affected component: ajax-spell (web UI) be...