CVE-2013-3653: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the RecommendSearch feature in the management screen in LOCKON EC-CUBE before 2.12.5 allow remote attackers to inject arbitrary web script or HTML via vectors involving the rank parameter, a different vulnerability than CVE-2013-3652.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3653?
CVE-2013-3653 has been classified as a medium severity vulnerability due to its potential impact on user data and application security.
How do I fix CVE-2013-3653?
To fix CVE-2013-3653, you should upgrade LOCKON EC-CUBE to version 2.12.5 or later, which addresses the XSS vulnerabilities.
What systems are affected by CVE-2013-3653?
CVE-2013-3653 affects LOCKON EC-CUBE versions prior to 2.12.5, specifically versions 2.12.0 through 2.12.4.
What types of attacks does CVE-2013-3653 allow?
CVE-2013-3653 allows remote attackers to inject arbitrary web scripts or HTML, leading to cross-site scripting (XSS) attacks.
Is CVE-2013-3653 a known vulnerability?
Yes, CVE-2013-3653 is a known vulnerability that was publicly disclosed and has been tracked for security remediation.