CVE-2005-3758

no score yetEPSS 19%

google: no CVSS score yet. EPSS 19% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet.

EPSS: 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2005-11-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

google:mini_search_appliance
google:search_appliance

References

http://metasploit.com/research/vulns/google_proxystylesheet/
http://secunia.com/advisories/17644
http://securitytracker.com/id?1015246
http://www.osvdb.org/20980
http://www.securityfocus.com/archive/1/417310/30/0/threaded

Check your stack JSON