Description

Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0101.html

http://secunia.com/advisories/55690

https://github.com/zkoss/zk/blob/v5.0.13/zkdoc/release-note

Related Vulnerabilities

CVE-2023-24425 Vulnerability in maven package com.cloudbees.jenkins.plugins:kubernetes-credentials-provider

CVE-2023-28155 Vulnerability in maven package org.webjars.bower:request

CVE-2011-2204 Vulnerability in maven package org.apache.tomcat:catalina

CVE-2014-0050 Vulnerability in maven package org.apache.tomcat:tomcat-coyote

CVE-2022-36663 Vulnerability in maven package org.gluu:oxauth-common

Severity

Critical

Classification

CWE-79

Tags

Vendor Advisory