CVE-2013-5966

Zkoss ZK Framework < 5.0.12 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (3)

[Third Party Advisory] http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0101.html

[Vendor Advisory] http://secunia.com/advisories/55690

[Various Sources] https://github.com/zkoss/zk/blob/v5.0.13/zkdoc/release-note

View Writeup ZIP pw:eip

Scores

EPSS 0.0036

EPSS Percentile 57.8%

Details

CWE

CWE-79

Status published

Products (15)

zkoss/zk_framework < 5.0.12

zkoss/zk_framework

... and 5 more

Published Nov 20, 2013

Tracked Since Feb 18, 2026