High · 8.0 CVE-2022-0964 EUVD-2022-1585GHSA-xm3x-787m-p66r

Stored XSS viva .webmv file upload in star7th/showdoc

Published Mar 15, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Description

Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4.

Vendor	Product	Affected	Fixed
star7th	star7th/showdoc	unspecified – < 2.10.4	2.10.4

Ecosystem	Package	Affected	Fixed	Record
Packagist	showdoc/showdoc	< 2.10.4	2.10.4	GHSA-xm3x-787m-p66r