Critical · 9.4 CVE-2022-0942 EUVD-2022-1394GHSA-9fcc-7g44-mxrj

Stored XSS due to Unrestricted File Upload in star7th/showdoc

Published Mar 15, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Description

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.

Vendor	Product	Affected	Fixed
star7th	star7th/showdoc	unspecified – < 2.10.4	2.10.4

Ecosystem	Package	Affected	Fixed	Record
Packagist	showdoc/showdoc	< 2.10.4	2.10.4	GHSA-9fcc-7g44-mxrj