{"action":"Upgrade zendframework/zend-form to 2.2.7 or later.","affected":[{"fixed":"2.2.7","introduced":"2.0.0"},{"fixed":"2.3.1","introduced":"2.3.0"}],"component":"zendframework/zend-form","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.2.7","2.3.1"],"ghsa_id":"GHSA-gvpp-6jrj-5pqc","id":"tcs_01M5KF34TX5HAGTGX5PS8H8AK2","modified_at":"2024-12-04T05:40:19.051789Z","published_at":"2024-06-07T21:58:34Z","references":["https://osv.dev/vulnerability/GHSA-gvpp-6jrj-5pqc","https://github.com/zendframework/zend-form/commit/6fe40314e8e3477494aadd03d62573bd1c212bd1","https://github.com/zendframework/zend-form/commit/d7a1f5bc4626b1df990391502a868b28c37ba65d","https://github.com/zendframework/zend-form/commit/fd43a951460c4bc60c77a566129705f6bdb9c61b","https://framework.zend.com/security/advisory/ZF2014-03","https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-form/ZF2014-03.yaml","https://github.com/zendframework/zend-form"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-gvpp-6jrj-5pqc","url":"https://osv.dev/vulnerability/GHSA-gvpp-6jrj-5pqc"}],"summary":"Zend-Form vulnerable to Cross-site Scripting"}