CVE-2005-3758

None

CVSS

—

EPSS

19.1%

Published

Nov 22, 2005

CISA due date

—

The record

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet.

Affected packages

Ecosystem	Package	Introduced	Fixed