Vulnerability Database
296,772
Total vulnerabilities in the database
Zendframework Potential XSS or HTML Injection vector in Zend_Json
Zend_Json_Encoder was not taking into account the solidus character (/) during encoding, leading to incompatibilities with the JSON specification, and opening the potential for XSS or HTML injection attacks when returning HTML within a JSON string.
| Software | From | Fixed in |
|---|---|---|
zendframework / zendframework1
|
1.7.0 | 1.7.9 |
|
zendframework / zendframework1
|
1.8.0 | 1.8.5 |
|
zendframework / zendframework1
|
1.9.0 | 1.9.7 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime