Vulnerability Database
290,206
Total vulnerabilities in the database
ZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`
Zend_Dojo_View_Helper_Editor was incorrectly decorating a TEXTAREA instead of a DIV. The Dojo team has reported that this has security implications as the rich text editor they use is unable to escape content for a TEXTAREA.
| Software | From | Fixed in |
|---|---|---|
zendframework / zendframework1
|
1.7.0 | 1.7.9 |
|
zendframework / zendframework1
|
1.8.0 | 1.8.5 |
|
zendframework / zendframework1
|
1.9.0 | 1.9.7 |