Unscored CVE-2013-5966 EUVD-2013-5796GHSA-r2q8-mr6h-xmhh

Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via u…

Published Nov 19, 2013 · Updated Sep 17, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

20131115 CVE-2013-5966 - XSS in ZK Framework mailing-list
https://github.com/zkoss/zk/blob/v5.0.13/zkdoc/release-note
55690 third-party-advisory