Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-0950

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-v94v-pxqp-5qgj

Cross-site Scripting in ShowDoc The upload feature of ShowDoc prior to version 2.10.4 allows files with the extension `.*html`, which leads to stored cross-site scripting.

gitlab/packagist/showdoc/showdoc/CVE-2022-0950

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.