medium4.3
CVE-2013-5966
Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Impact
Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zkoss | Zk Framework | through 5.0.12 Versions 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0101.html
- http://secunia.com/advisories/55690
- https://github.com/zkoss/zk/blob/v5.0.13/zkdoc/release-note
- http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0101.html
- http://secunia.com/advisories/55690
- https://github.com/zkoss/zk/blob/v5.0.13/zkdoc/release-note