CVE-2024-35621

Packagist/getformwork/formwork CVE-2024-35621: medium 4.8, EPSS 0.27%

formwork Cross-site scripting vulnerability in Markdown fields

Action: Upgrade getformwork/formwork to 1.13.0 or later.

composer require getformwork/formwork:1.13.0

Affected

Fixed versions

Sources

• osv: GHSA-gx8m-f3mp-fg99
• https://github.com/getformwork/formwork/security/advisories/GHSA-gx8m-f3mp-fg99
• https://nvd.nist.gov/vuln/detail/CVE-2024-35621
• https://github.com/getformwork/formwork/commit/2d92e6dbf99a9a49797947afbda0cdd4e56e11df
• https://github.com/getformwork/formwork/commit/6adc302f5a294f2ffbbf1571dd4ffea6b7876723
• https://github.com/getformwork/formwork

CVE-2024-35621 · published 2024-05-28T16:54:31Z · modified 2026-07-08T06:53:06.086285941Z · JSON