CVE-2005-1231: Jaws

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitrary web script or HTML via the (1) term or (2) description.

Affected products

• Jaws Jaws: version 0.3 only; version 0.4 only; version 0.5_beta2 only

Published 2005-05-02. Last modified 2026-06-16.