CVE-2013-5913

OXID eShop is vulnerable to an XSS in getRecommSearch (recommlist.php). Affected: OXID eShop before 4.6.7; Professional/Community Edition 4.7.x before 4.7.8; Enterprise Edition 5.x before 5.0.8. The issue allows remote attackers to inject arbitrary script/HTML via the searchrecomm parameter. Reme...