CVE-2007-5898: PHP

Medium severity, CVSS 6.4. EPSS: 2.8% chance of exploitation in the next 30 days.

The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465.

Affected products

• PHP PHP: up to and including 5.2.4

Published 2007-11-20. Last modified 2026-06-16.