Skip to content
OpenAdvisories

Package · Packagist

zf-commons/zfc-user

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2015-1039

    ZF-Commons ZfcUser Vulnerable to XSS in Login Redirect

    Cross-site scripting (XSS) vulnerability in user/login.phtml in ZF-Commons ZfcUser before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.

    zf-commons/zfc-user Packagist