Vulnerability in Clam Anti-Virus Clamav

CVE-2005-1800

Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php.

EPSS: 0.031 (86.2th percentile) — read the EPSS interpretation.

Affected products

Clam_anti-virus Clamav — versions 0.81, 0.82, 0.83
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, Patch, x_refsource_FULLDISC)
cve@mitre.org (vdb-entry, x_refsource_BID)