Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clamav | Clam_anti-virus | 0.81 (including) | 0.81 (including) |
| Clamav | Clam_anti-virus | 0.82 (including) | 0.82 (including) |
| Clamav | Clam_anti-virus | 0.83 (including) | 0.83 (including) |
| Clamav | Clam_anti-virus | 0.84_rc1 (including) | 0.84_rc1 (including) |
| Clamav | Clam_anti-virus | 0.84_rc2 (including) | 0.84_rc2 (including) |