Skip to content
OpenAdvisories

Package · Packagist

zendframework/zend-view

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.1
    GHSA-m7hr-j867-3f34

    ZendFramework has potential Cross-site Scripting vector in multiple view helpers

    Many Zend Framework 2 view helpers were using the `escapeHtml()` view helper in order to escape HTML attributes, instead of the more appropriate `escapeHtmlAttr()`. In situations where user data and/or JavaScript is used to seed attributes, this can lead to p…

    zendframework/zend-view Packagist