CVE-2005-2339: Msearch Unicode Msearch

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51(U1)-beta1, 1.51(U1), and 1.52(U1) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Msearch Unicode Msearch: version 1.51_u1 only; version 1.51_u1_beta1 only; version 1.52_u1 only

Published 2005-11-21. Last modified 2026-06-16.