GHSA-4vf6-mq7w-3hp6

Summary

Zend_Filter_StripTags vulnerable to Cross-site Scripting when comments allowed

Severity

medium

Published

2024-06-07

References

• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2010-03.yaml
• https://github.com/zendframework/zf1
• https://web.archive.org/web/20210411020019/https://framework.zend.com/security/advisory/ZF2010-03

Related advisories

• GHSA-6fqw-j3vm-7f66 — critical · Packagist/zendframework/zendframework1
• GHSA-v42g-7q2x-cw32 — critical · Packagist/zendframework/zendframework1
• GHSA-2x36-qhx3-7m5f — critical · Packagist/zendframework/zendframework1
• GHSA-mhpx-3rv8-wrjm — critical · Packagist/zendframework/zendframework1
• GHSA-qf36-fx9f-232x — critical · Packagist/zendframework/zendframework1
• GHSA-848f-mph5-9pm9 — high · Packagist/zendframework/zendframework1
• GHSA-8xhv-gqm4-3w99 — high · Packagist/zendframework/zendframework1
• GHSA-9v78-h226-2rmq — high · Packagist/zendframework/zendframework1

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity