CVE-2013-5996: XSS
Multiple cross-site scripting (XSS) vulnerabilities in shopping/payment.tpl components in LOCKON EC-CUBE 2.11.0 through 2.13.0 allow remote attackers to inject arbitrary web script or HTML via crafted values.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5996?
CVE-2013-5996 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-5996?
To resolve CVE-2013-5996, upgrade your LOCKON EC-CUBE installation to version 2.13.1 or later where the vulnerability has been patched.
What types of vulnerabilities are associated with CVE-2013-5996?
CVE-2013-5996 is associated with multiple cross-site scripting (XSS) vulnerabilities allowing the injection of arbitrary web scripts.
Which versions of LOCKON EC-CUBE are affected by CVE-2013-5996?
LOCKON EC-CUBE versions 2.11.0 through 2.13.0 are vulnerable to CVE-2013-5996.
Who is affected by CVE-2013-5996?
Any user or organization utilizing vulnerable versions of LOCKON EC-CUBE for their shopping or payment functionalities may be affected by CVE-2013-5996.