Security Zend Framework 2.4.2 / 1.12.13 XXE Injection August 13, 2015 007admin Zend Framework versions 2.4.2 and below and 1.12.13 and below suffer from an XML external entity injection vulnerability.