CVE-2013-5913

Description

Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Community Edition 4.7.x before 4.7.8, and Enterprise Edition 5.x before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via the searchrecomm parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/87760

http://www.securityfocus.com/bid/62901

http://wiki.oxidforge.org/Security_bulletins/2013-001

http://secunia.com/advisories/55193

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS