CVE-2013-5966 Information

Description

Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Reference

http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0101.html http://secunia.com/advisories/55690 https://github.com/zkoss/zk/blob/v5.0.13/zkdoc/release-note