Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitrary web script or HTML via the (1) term or (2) description.
| Software | From | Fixed in |
|---|---|---|
| jaws / jaws | 0.5_beta2 | 0.5_beta2.x |
| jaws / jaws | 0.3 | 0.3.x |
| jaws / jaws | 0.4 | 0.4.x |