Skip to content
OpenAdvisories

Package · Packagist

zendframework/zend-form

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    GHSA-gvpp-6jrj-5pqc

    Zend-Form vulnerable to Cross-site Scripting

    Many Zend Framework 2 view helpers were using the escapeHtml() view helper in order to escape HTML attributes, instead of the more appropriate escapeHtmlAttr(). In situations where user data and/or JavaScript is used to seed attributes, this can lead to poten…

    zendframework/zend-form Packagist