PT-2013-5866

Name of the Vulnerable Software and Affected Versions OXID eShop versions prior to 4.6.7 OXID eShop Professional and Community Edition versions prior to 4.7.8 OXID eShop Enterprise Edition versions prior to 5.0.8 Description The issue is related to a cross-site scripting XSS vulnerability in the...

CVE-2013-5913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Community Edition 4.7.x before 4.7.8, and Enterprise Edition 5.x before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via the searchrecomm...