-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| zendframework/zendframework1 | composer | >= 1.9.0, < 1.9.7 | 1.9.7 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper use of PHP's core escaping functions (htmlspecialchars/htmlentities) without proper charset specification. The advisory explicitly identifies these functions as problematic when used with hard-coded/undefined charset parameters across multiple components. While exact file paths aren't provided in references, the pattern of insecure function usage is clearly documented in the security advisory and consistent with XSS vulnerabilities caused by encoding mismatches.
PHPPHPOngoing coverage of React2Shell