What is GHSA-9778-v769-qvjf?

GHSA-9778-v769-qvjf is a security advisory published by GitHub Security Advisories with Medium severity. code16 Sharp vulnerable to Cross Site Scripting (XSS)

Which CVE IDs does GHSA-9778-v769-qvjf cover?

GHSA-9778-v769-qvjf covers the following CVE IDs: CVE-2025-61457. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9778-v769-qvjf?

GHSA-9778-v769-qvjf has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-9778-v769-qvjf?

GHSA-9778-v769-qvjf affects 1 product, including: composer/code16/sharp:\u003c 9.7.0.

GHSA-9778-v769-qvjfMediumCVSS 6.1

code16 Sharp vulnerable to Cross Site Scripting (XSS)

Vendor

GitHub Security Advisories

Published

October 21, 2025

Last Modified

October 21, 2025

🔗 CVE IDs covered (1)

CVE-2025-61457 →

📋 Description

code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting (XSS) src/Form/Fields/SharpFormUploadField.php.

🎯 Affected products1

composer/code16/sharp:< 9.7.0

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2025-61457
https://github.com/code16/sharp/issues/611
https://github.com/chimmeee/vulnerability-research/blob/main/CVE-2025-61457
https://github.com/code16/sharp/blob/6d106b05aa07c6b46f5de28f909b732e1bbcdc47/src/Form/Fields/SharpFormUploadField.php#L97
https://github.com/code16/sharp/releases/tag/v9.7.0
https://github.com/code16/sharp/commit/bf7fedf2086d86aac16194733a6385564e5cf124
https://github.com/advisories/GHSA-9778-v769-qvjf