Unscored CVE-2013-5913 EUVD-2013-5747GHSA-c36f-9rph-r8f8

Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Com…

Published Oct 15, 2013 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Community Edition 4.7.x before 4.7.8, and Enterprise Edition 5.x before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via the searchrecomm parameter.

References

http://wiki.oxidforge.org/Security_bulletins/2013-001
oxid-eshop-cve20135913-xss(87760) vdb-entry
62901 vdb-entry
55193 third-party-advisory
98235 vdb-entry