Executive brief
ZendFramework potential Cross-site Scripting vectors due to inconsistent encodings
Affected products
- Packagist zendframework/zendframework1
Junglewise Threat Intelligence
ZendFramework potential Cross-site Scripting vectors due to inconsistent encodings
Severity: low · CVSS 3.1 · Published 2024-06-07
Technologies: zendframework/zendframework1 (Packagist). Vendors: Packagist.
Related threats
- Zendframework1 Potential SQL injection in ORDER and GROUP functions
- Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability
- ZendFramework1 Potential Insufficient Entropy Vulnerability
- Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)
- ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select