{"action":"Upgrade getformwork/formwork to 2.0.0-beta.4 or later.","affected":[{"fixed":"2.0.0-beta.4","introduced":"2.0.0-beta.3"}],"component":"getformwork/formwork","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.0.0-beta.4"],"ghsa_id":"GHSA-vf6x-59hh-332f","id":"tcs_01M5KF943BKV235CZ2P7DMRHP6","modified_at":"2026-02-18T23:55:33.002649Z","published_at":"2025-03-01T00:11:46Z","references":["https://osv.dev/vulnerability/GHSA-vf6x-59hh-332f","https://github.com/getformwork/formwork/security/advisories/GHSA-vf6x-59hh-332f","https://github.com/getformwork/formwork/commit/aa3e9c684035d9e8495169fde7c57d97faa3f9a2","https://github.com/getformwork/formwork"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-vf6x-59hh-332f","url":"https://osv.dev/vulnerability/GHSA-vf6x-59hh-332f"}],"summary":"Formwork has a cross-site scripting (XSS) vulnerability in Site title"}