code16

Products

ProductCVEsExploitedLatest
sharp7–Sep 24, 2026

Exploited and recent CVEs

  • CVE-2026-61823 High 7.3 code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute 0.2%
  • CVE-2026-61825 High 8.7 code16/sharp has a stored XSS via data-html-content Sanitizer Bypass 0.2%
  • CVE-2026-44692 High 7.7 Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpoint 0.3%
  • CVE-2026-53634 Medium 4.3 Sharp: Missing Authorization Check in Quick Creation Command Endpoints 0.2%
  • CVE-2026-33686 High 8.8 Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtil 0.6%
  • CVE-2026-33687 High 8.8 Sharp has Unrestricted File Upload via Client-Controlled Validation Rules 0.5%
  • CVE-2025-62798 Medium 5.4 Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax 0.2%