Skip to content
OpenAdvisories

Product · code16

sharp

7 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.3

    Sharp: Missing Authorization Check in Quick Creation Command Endpoints

    Sharp is a content management framework built for Laravel as a package. From version 9.0.0 to before version 9.22.3, the create and store endpoints of the Quick Creation Command feature did not enforce any authorization check. An authenticated Sharp user with…

  • Medium 5.4

    Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax

    Sharp is a content management framework built for Laravel as a package. Prior to 9.11.1, a Cross-Site Scripting (XSS) vulnerability was discovered in code16/sharp when rendering content using the SharpShowTextField component. In affected versions, expressions…