CVE-2013-5966
Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Date published : 2013-11-19
https://github.com/zkoss/zk/blob/v5.0.13/zkdoc/release-note
http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0101.html
