CVE-2022-0940

Stored XSS due to Unrestricted File Upload in star7th/showdoc

CVSS 6.3 MEDIUMEPSS 0.5%CWE-79

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

star7th · star7th/showdoc

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/star7th/showdoc/commit/78522520892d4e29cc94148c6ec84a204a607b73 https://huntr.dev/bounties/856bd2e2-db4f-4b7d-9927-222261ae3782