CVE-2013-5913

Published: Oct 15, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Community Edition 4.7.x before 4.7.8, and Enterprise Edition 5.x before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via the searchrecomm parameter.

Affected (31)

Products: Oxid Esales: Eshop

Oxid Esales

1 product

Eshop

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Oxid Esales Eshop	Up to 4.6.6
Oxid Esales Eshop	Version 4.6.0
Oxid Esales Eshop	Version 4.6.1
Oxid Esales Eshop	Version 4.6.2
Oxid Esales Eshop	Version 4.6.3
Oxid Esales Eshop	Version 4.6.4
Oxid Esales Eshop	Version 4.6.5
Oxid Esales Eshop	Version 4.7.0
Oxid Esales Eshop	Version 4.7.0
Oxid Esales Eshop	Version 4.7.1
Oxid Esales Eshop	Version 4.7.1
Oxid Esales Eshop	Version 4.7.2
Oxid Esales Eshop	Version 4.7.2
Oxid Esales Eshop	Version 4.7.3
Oxid Esales Eshop	Version 4.7.3
Oxid Esales Eshop	Version 4.7.4
Oxid Esales Eshop	Version 4.7.4
Oxid Esales Eshop	Version 4.7.5
Oxid Esales Eshop	Version 4.7.5
Oxid Esales Eshop	Version 4.7.6
Oxid Esales Eshop	Version 4.7.6
Oxid Esales Eshop	Version 4.7.7
Oxid Esales Eshop	Version 4.7.7
Oxid Esales Eshop	Version 5.0.0
Oxid Esales Eshop	Version 5.0.1
Oxid Esales Eshop	Version 5.0.2
Oxid Esales Eshop	Version 5.0.3
Oxid Esales Eshop	Version 5.0.4
Oxid Esales Eshop	Version 5.0.5
Oxid Esales Eshop	Version 5.0.6
Oxid Esales Eshop	Version 5.0.7