CVE-2013-5966

Published: Nov 20, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (14)

Products: Zkoss: Zk Framework

Zkoss

1 product

Zk Framework

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Zkoss Zk Framework	Up to 5.0.12
Zkoss Zk Framework	Version 5.0.0
Zkoss Zk Framework	Version 5.0.10
Zkoss Zk Framework	Version 5.0.11
Zkoss Zk Framework	Version 5.0.1
Zkoss Zk Framework	Version 5.0.2
Zkoss Zk Framework	Version 5.0.3
Zkoss Zk Framework	Version 5.0.4
Zkoss Zk Framework	Version 5.0.5
Zkoss Zk Framework	Version 5.0.6
Zkoss Zk Framework	Version 5.0.7.1
Zkoss Zk Framework	Version 5.0.7
Zkoss Zk Framework	Version 5.0.8
Zkoss Zk Framework	Version 5.0.9