# Security Bulletin 2013-001 published

**URL:** <https://forum.oxid-esales.com/t/security-bulletin-2013-001-published/66562>\
**Category:** OXID Announcements\
**Tags:** security\
**Created:** [October 8, 2013, 2:20pm UTC](https://forum.oxid-esales.com/t/security-bulletin-2013-001-published/66562 "2013-10-08T14:20:51Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![marco.steinhaeuser](https://forum.oxid-esales.com/user_avatar/forum.oxid-esales.com/marco.steinhaeuser/32/1832_2.png) [@marco.steinhaeuser](https://forum.oxid-esales.com/u/marco.steinhaeuser)\
**Post date:** [October 8, 2013, 2:20pm UTC](https://forum.oxid-esales.com/t/security-bulletin-2013-001-published/66562/1 "2013-10-08T14:20:51Z")

</div>

Hi everybody,

please note that we published the security bulletin 2013-001 today as announced with the last patch release:

> **[Security bulletin: 2013-001 • OXIDforge](https://oxidforge.org/en/security-bulletin-2013-001.html)**
>
> CVE-2013-5913: Under certain circumstances, an attacker can trick a user to enter a specially crafted URI or click on a mal-formed link to exploit a cross-site scripting vulnerability that theoretically can be used to gain unauthorized access to a...

The vulnerability has been fixed with OXID eShop Enterprise Edition 5.0.8 and Community/Professional Edition 4.7.8. If you cannot update for a certain reason, you may find a workaround in the security bulletin.

Best!

---

<div class="post-metadata">

**Author:** ![system](https://forum.oxid-esales.com/user_avatar/forum.oxid-esales.com/system/32/4245_2.png) [@system](https://forum.oxid-esales.com/u/system)\
**Post date:** [July 13, 2026, 8:35pm UTC](https://forum.oxid-esales.com/t/security-bulletin-2013-001-published/66562/2 "2026-07-13T20:35:50Z")

</div>