What’s Vulnerable › Vulnerabilities

CVE-2013-5744

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-10-28 · updated 2026-06-16
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML via an arbitrary ref_XXX parameter.

Affected products

• Fengoffice Feng Office: through 2.3.2; 1.6.2, 1.7, 1.7-beta, 1.7-beta2, 1.7-rc, 1.7-rc2 (+39)

References

• http://archives.neohapsis.com/archives/bugtraq/2013-10/0031.html
• https://www.htbridge.com/advisory/HTB23174
• http://archives.neohapsis.com/archives/bugtraq/2013-10/0031.html
• https://www.htbridge.com/advisory/HTB23174

Get alerted when CVE-2013-5744 or the next vulnerability affects your stack