Skip to content
OpenAdvisories
Critical · 9.0 CVE-2022-0945 EUVD-2022-1549GHSA-vpwq-6cp4-ffqc

Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc

Published Mar 15, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: star7th Product: star7th/showdoc Package: showdoc/showdoc Ecosystem: Packagist

Description

Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.

Affected products

VendorProductAffectedFixed
star7th star7th/showdoc unspecified – < v2.10.4 v2.10.4

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist showdoc/showdoc < 2.10.4 2.10.4 GHSA-vpwq-6cp4-ffqc

References