Multiple Cross-Site Scripting Vulnerabilities in Zend Framework by Zend Technologies

CVE-2012-4451

What is CVE-2012-4451?

Multiple cross-site scripting vulnerabilities exist in the Zend Framework version 2.0.x, allowing remote attackers to inject arbitrary web scripts or HTML. These vulnerabilities affect various components such as Debug, Feed PubSubHubbub, Log Formatter Xml, Tag Cloud Decorator, Uri, and several View Helpers. Attackers can exploit these vulnerabilities through unspecified user input, potentially leading to unauthorized actions on behalf of users or compromise of sensitive data.

References