CyberRota Analysis
AI-GeneratedA cross-site scripting vulnerability exists in the Xapian core library, affecting versions prior to 2.1.0 and 1.4.32, due to insufficient HTML escaping in the snippet generation function. This flaw could allow attackers to inject malicious scripts into web applications that utilize Xapian for search functionality, potentially compromising user data and session integrity. Organizations using affected versions of Xapian should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet(). NOTE: this issue exists because of a missed corner case of CVE-2018-0499.