| Package | Affected versions | Patched versions |
|---|---|---|
| zendframework/zendframework1 | ≥ 1.7.0, < 1.7.9≥ 1.8.0, < 1.8.5≥ 1.9.0, < 1.9.7 | 1.7.91.8.51.9.7 |
Zend_Service_ReCaptcha_MailHide had a potential XSS vulnerability. Due to the fact that the email address was never validated, and because its use of htmlentities() did not include the encoding argument, it was potentially possible for a malicious user aware of the issue to inject a specially crafted multibyte string as an attack via the CAPTCHA's email argument
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free