Unscored severity · published Nov 20, 2013
CVE-2013-5966
Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZF
ZK Framework · Zkoss
through 5.0.12; 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5966
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5966
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0101.html
Vendor Advisory
http://secunia.com/advisories/55690
github.com
https://github.com/zkoss/zk/blob/v5.0.13/zkdoc/release-note
More from ZK Framework
7.5
CVE-2022-36537
ZK Framework AuUploader Unspecified Vulnerability