-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from Zend_Dojo_View_Helper_Editor incorrectly using TEXTAREA elements. In Zend Framework 1, view helper functionality is implemented through classes with direct() methods that generate HTML output. The advisory specifically implicates this helper's output mechanism, and the direct() method is the primary entry point for element generation. The fix involved switching to DIV elements with NOSCRIPT fallback, confirming the vulnerability exists in the direct() method's output logic.
PHPPHP| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| zendframework/zendframework1 | composer | >= 1.7.0, < 1.7.9 | 1.7.9 |
| zendframework/zendframework1 | composer | >= 1.8.0, < 1.8.5 | 1.8.5 |
| zendframework/zendframework1 | composer | >= 1.9.0, < 1.9.7 | 1.9.7 |
Ongoing coverage of React2Shell