High · 7.1 CVE-2022-0956 EUVD-2022-1568GHSA-wg8p-w946-c482

Stored XSS via File Upload in star7th/showdoc

Published Mar 15, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Description

Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4.

Vendor	Product	Affected	Fixed
star7th	star7th/showdoc	unspecified – < v.2.10.4	v.2.10.4

Ecosystem	Package	Affected	Fixed	Record
Packagist	showdoc/showdoc	< 2.10.4	2.10.4	GHSA-wg8p-w946-c482