CVE-2025-61457

MEDIUM

code16 sharp < 9.7.0 - Cross-Site Scripting in SharpFormUploadField

Title source: llm

code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting (XSS) src/Form/Fields/SharpFormUploadField.php.

Core 4

Core References

Various Sources

Various Sources

Issue Tracking

Release Notes

CVSS v3 6.1

EPSS 0.0030

EPSS Percentile 21.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-79

Status published

Products (1)

code16/sharp 0 - 9.7.0Packagist

Published Oct 21, 2025

Tracked Since Feb 18, 2026