CVE-2006-6223: Google Mini Search Appliance
Medium severity, CVSS 4.3. EPSS: 3.1% chance of exploitation in the next 30 days.
Cross-site scripting (XSS) vulnerability in Google Search Appliance and Google Mini allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded q parameter.
Affected products
Published 2006-12-02. Last modified 2026-06-16.