Skip to content
OpenAdvisories

Package · Packagist

zendframework/zend-navigation

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-6v7p-5qcq-268c

    Zend-Navigation vulnerable to Cross-site Scripting

    Many Zend Framework 2 view helpers were using the `escapeHtml()` view helper in order to escape HTML attributes, instead of the more appropriate `escapeHtmlAttr()`. In situations where user data and/or JavaScript is used to seed attributes, this can lead to p…

    zendframework/zend-navigation Packagist