Vulnerability Database
290,206
Total vulnerabilities in the database
Zendframework Potential XSS or HTML Injection vector in Zend_Json
Zend_Json_Encoder was not taking into account the solidus character (/) during encoding, leading to incompatibilities with the JSON specification, and opening the potential for XSS or HTML injection attacks when returning HTML within a JSON string.
| Software | From | Fixed in |
|---|---|---|
zendframework / zendframework1
|
1.7.0 | 1.7.9 |
|
zendframework / zendframework1
|
1.8.0 | 1.8.5 |
|
zendframework / zendframework1
|
1.9.0 | 1.9.7 |