{"action":"Upgrade getformwork/formwork to 1.13.0 or later.","affected":[{"fixed":"1.13.0","introduced":"0"}],"component":"getformwork/formwork","cve_ids":["CVE-2024-35621"],"ecosystem":"Packagist","epss":0.00271,"exploited":false,"fixed_versions":["1.13.0"],"ghsa_id":"GHSA-gx8m-f3mp-fg99","id":"tcs_01M5KF369PYZYE24447FFQGX6Y","modified_at":"2026-07-08T06:53:06.086285941Z","published_at":"2024-05-28T16:54:31Z","references":["https://osv.dev/vulnerability/GHSA-gx8m-f3mp-fg99","https://github.com/getformwork/formwork/security/advisories/GHSA-gx8m-f3mp-fg99","https://nvd.nist.gov/vuln/detail/CVE-2024-35621","https://github.com/getformwork/formwork/commit/2d92e6dbf99a9a49797947afbda0cdd4e56e11df","https://github.com/getformwork/formwork/commit/6adc302f5a294f2ffbbf1571dd4ffea6b7876723","https://github.com/getformwork/formwork"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-gx8m-f3mp-fg99","url":"https://osv.dev/vulnerability/GHSA-gx8m-f3mp-fg99"}],"summary":"formwork Cross-site scripting vulnerability in Markdown fields"}