github.com
https://github.com/star7th/showdoc CVE-2022-0957
MEDIUM
Stored XSS via File Upload in star7th/showdoc
Record summary
CVE-2022-0957 has a selected CVSS score of 5.4 (medium).
Description
Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4.
Description source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
star7th/showdocBrowse star7th / star7th/showdoc | CVE List | Before 2.10.4 | affected |
showdoc/showdocBrowse Packagist / showdoc/showdoc | GitHub Advisory | Before 2.10.4 · Fixed in 2.10.4 | affected |
References
5github.com
https://github.com/star7th/showdoc/commit/d1c9ed0d77ea5d56f09be0c492361dca8af745bb github.com
https://github.com/star7th/showdoc/pull/1632 huntr.devConfirmation
https://huntr.dev/bounties/b4918d45-b635-40db-bb4b-34035e1aca21 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-0957