CVE:CVE-2005-1231
CNNVD:CNNVD-200505-191
JAWS 0.4的GlossaryModel.php中的NewTerm函数存在跨站脚本攻击(XSS)漏洞，允许远程攻击者通过(1)term或(2)description来注入任意Web脚本或HTML。
solution:Upgrade jaws jaws to a higher version than 0.3,0.4,0.5_beta2,and avoid the version 0.3,0.4,0.5_beta2