# Security Bulletin 2010-007

**URL:** <https://forum.oxid-esales.com/t/security-bulletin-2010-007/47437>\
**Category:** OXID Announcements\
**Tags:** security\
**Created:** [December 13, 2010, 11:27am UTC](https://forum.oxid-esales.com/t/security-bulletin-2010-007/47437 "2010-12-13T11:27:14Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![marco.steinhaeuser](https://forum.oxid-esales.com/user_avatar/forum.oxid-esales.com/marco.steinhaeuser/32/1832_2.png) [@marco.steinhaeuser](https://forum.oxid-esales.com/u/marco.steinhaeuser)\
**Post date:** [December 13, 2010, 11:27am UTC](https://forum.oxid-esales.com/t/security-bulletin-2010-007/47437/1 "2010-12-13T11:27:14Z")

</div>

Hi everybody,

Security Bulletin 2010-007 has been published right now:

> **[Security bulletin: 2010-007 • OXIDforge](https://oxidforge.org/en/security-bulletin-2010-007.html)**
>
> XSS: By specially crafted JavaScript code, inserted in particular input fields in OXID eShop frontend, it’s possible to execute unauthorized JavaScript code in eShop admin area.

Partners and support contract owners have already been informed on November 29th.

Regards  
Marco

---

<div class="post-metadata">

**Author:** ![system](https://forum.oxid-esales.com/user_avatar/forum.oxid-esales.com/system/32/4245_2.png) [@system](https://forum.oxid-esales.com/u/system)\
**Post date:** [July 13, 2026, 8:35pm UTC](https://forum.oxid-esales.com/t/security-bulletin-2010-007/47437/2 "2026-07-13T20:35:38Z")

</div>

Closed on July 13, 2026, 8:35pm UTC