github.com
https://github.com/star7th/showdoc CVE-2022-0938
MEDIUM
Stored XSS via file upload in star7th/showdoc
Record summary
CVE-2022-0938 has a selected CVSS score of 5.4 (medium).
Description
Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.
Description source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
star7th/showdocBrowse star7th / star7th/showdoc | CVE List | Before v2.10.4 | affected |
showdoc/showdocBrowse Packagist / showdoc/showdoc | GitHub Advisory | Before 2.10.4 · Fixed in 2.10.4 | affected |
References
4github.com
https://github.com/star7th/showdoc/commit/830c89a4c2c5fd0dd491422bf8e97b4eb5713f55 huntr.devConfirmation
https://huntr.dev/bounties/3eb5a8f9-24e3-4eae-a212-070b2fbc237e nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-0938