Lucene search
K

6 matches found

Veracode
Veracode
added 2025/12/13 6:16 a.m.4 views

Cross Site Scripting (XSS)

code16/sharp is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input validation and output encoding in src/Form/Fields/SharpFormUploadField.php, which allows an attacker to inject and execute arbitrary malicious scripts in a victim’s browser...

6.1CVSS6.8AI score0.0003EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2025/10/21 9:33 p.m.1 views

GHSA-9778-V769-QVJF code16 Sharp vulnerable to Cross Site Scripting (XSS)

code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting XSS src/Form/Fields/SharpFormUploadField.php...

6.1CVSS6.3AI score0.0003EPSS
Exploits0References7
NVD
NVD
added 2025/10/21 7:21 p.m.1 views

CVE-2025-61457

code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting XSS src/Form/Fields/SharpFormUploadField.php...

6.1CVSS0.0003EPSS
Exploits0References4
OSV
OSV
added 2025/10/21 7:21 p.m.1 views

CVE-2025-61457

code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting XSS src/Form/Fields/SharpFormUploadField.php...

6.1CVSS6.3AI score0.0003EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/21 12:0 a.m.5 views

CVE-2025-61457

code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting XSS src/Form/Fields/SharpFormUploadField.php...

0.0003EPSS
Exploits0References4
CVE
CVE
added 2025/10/21 12:0 a.m.5 views

CVE-2025-61457

code16/sharp v9.6.6 is vulnerable to Cross-Site Scripting (XSS) in src/Form/Fields/SharpFormUploadField.php due to improper input validation/output encoding. An attacker could inject and execute arbitrary scripts in a victim’s browser. Remediation: upgrade to code16/sharp >= 9.7.0 (or apply pr...

6.1CVSS5.8AI score0.0003EPSS
Exploits0References4
Rows per page
Query Builder