Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-61457 EUVD-2025-35217GHSA-9778-v769-qvjf

code16 Sharp vulnerable to Cross Site Scripting (XSS)

Published Oct 21, 2025 · Updated Oct 21, 2025 · Assigned by mitre

Description

code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting (XSS) src/Form/Fields/SharpFormUploadField.php.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist code16/sharp < 9.7.0 9.7.0 GHSA-9778-v769-qvjf

References