Lookup for vulnerable packages by Package URL.

Purlpkg:composer/showdoc/showdoc@1.4.5
Typecomposer
Namespaceshowdoc
Nameshowdoc
Version1.4.5
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.8.1
Latest_non_vulnerable_version3.8.1
Affected_by_vulnerabilities
0
url VCID-1t7f-6es9-k3c8
vulnerability_id VCID-1t7f-6es9-k3c8
summary showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0079
reference_id
reference_type
scores
0
value 0.00194
scoring_system epss
scoring_elements 0.41271
published_at 2026-06-06T12:55:00Z
1
value 0.00194
scoring_system epss
scoring_elements 0.4121
published_at 2026-06-08T12:55:00Z
2
value 0.00194
scoring_system epss
scoring_elements 0.4124
published_at 2026-06-07T12:55:00Z
3
value 0.00194
scoring_system epss
scoring_elements 0.4119
published_at 2026-06-04T12:55:00Z
4
value 0.00194
scoring_system epss
scoring_elements 0.41267
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0079
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/e43df0a190f68aefa272507d3bd54475f566c1db
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/e43df0a190f68aefa272507d3bd54475f566c1db
3
reference_url https://huntr.dev/bounties/b37f0e26-355a-4d50-8495-a567c10828ee
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/b37f0e26-355a-4d50-8495-a567c10828ee
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0079
reference_id CVE-2022-0079
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0079
5
reference_url https://github.com/advisories/GHSA-5mj6-3cmq-fh34
reference_id GHSA-5mj6-3cmq-fh34
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5mj6-3cmq-fh34
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.0
purl pkg:composer/showdoc/showdoc@2.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3j53-nrc9-n7as
1
vulnerability VCID-3wb2-9q5s-5kb4
2
vulnerability VCID-4kd3-qaha-3ybn
3
vulnerability VCID-7aas-2br7-ubfb
4
vulnerability VCID-7fcp-yz8r-pbhf
5
vulnerability VCID-a3zn-fqvn-w3ff
6
vulnerability VCID-agx5-jjj7-gyfr
7
vulnerability VCID-av22-2r6d-kydb
8
vulnerability VCID-chek-rsju-gqfd
9
vulnerability VCID-dghy-4cfc-7kc9
10
vulnerability VCID-dknr-fwjh-g7bw
11
vulnerability VCID-e6cf-bz5b-5fdv
12
vulnerability VCID-gsj9-k61j-1bbs
13
vulnerability VCID-gt4a-2hs9-a7dz
14
vulnerability VCID-h89u-59pk-2fgu
15
vulnerability VCID-mj16-49bu-1fhs
16
vulnerability VCID-ppnh-m1gf-cyfb
17
vulnerability VCID-qwju-19hh-jqbm
18
vulnerability VCID-t22b-135p-yyeb
19
vulnerability VCID-t3xf-e2fb-63dk
20
vulnerability VCID-v4rx-u3kd-dubz
21
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.0
aliases CVE-2022-0079, GHSA-5mj6-3cmq-fh34
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1t7f-6es9-k3c8
1
url VCID-3j53-nrc9-n7as
vulnerability_id VCID-3j53-nrc9-n7as
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0880
reference_id
reference_type
scores
0
value 0.00304
scoring_system epss
scoring_elements 0.53996
published_at 2026-06-07T12:55:00Z
1
value 0.00304
scoring_system epss
scoring_elements 0.54008
published_at 2026-06-06T12:55:00Z
2
value 0.00304
scoring_system epss
scoring_elements 0.54001
published_at 2026-06-05T12:55:00Z
3
value 0.00304
scoring_system epss
scoring_elements 0.53974
published_at 2026-06-08T12:55:00Z
4
value 0.00304
scoring_system epss
scoring_elements 0.53944
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0880
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/818d7fe731f452acccacf731ce47ec27ad68049c
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/818d7fe731f452acccacf731ce47ec27ad68049c
3
reference_url https://huntr.dev/bounties/df347aa9-ed9b-4f75-af99-c83b8aad3bcf
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/df347aa9-ed9b-4f75-af99-c83b8aad3bcf
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0880
reference_id CVE-2022-0880
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0880
5
reference_url https://github.com/advisories/GHSA-gq77-3r6x-383w
reference_id GHSA-gq77-3r6x-383w
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gq77-3r6x-383w
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.2
purl pkg:composer/showdoc/showdoc@2.10.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4kd3-qaha-3ybn
1
vulnerability VCID-7aas-2br7-ubfb
2
vulnerability VCID-7fcp-yz8r-pbhf
3
vulnerability VCID-a3zn-fqvn-w3ff
4
vulnerability VCID-agx5-jjj7-gyfr
5
vulnerability VCID-av22-2r6d-kydb
6
vulnerability VCID-chek-rsju-gqfd
7
vulnerability VCID-dghy-4cfc-7kc9
8
vulnerability VCID-dknr-fwjh-g7bw
9
vulnerability VCID-e6cf-bz5b-5fdv
10
vulnerability VCID-gsj9-k61j-1bbs
11
vulnerability VCID-gt4a-2hs9-a7dz
12
vulnerability VCID-h89u-59pk-2fgu
13
vulnerability VCID-mj16-49bu-1fhs
14
vulnerability VCID-ppnh-m1gf-cyfb
15
vulnerability VCID-qwju-19hh-jqbm
16
vulnerability VCID-t22b-135p-yyeb
17
vulnerability VCID-t3xf-e2fb-63dk
18
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.2
1
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0880, GHSA-gq77-3r6x-383w
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3j53-nrc9-n7as
2
url VCID-3wb2-9q5s-5kb4
vulnerability_id VCID-3wb2-9q5s-5kb4
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-4172
reference_id
reference_type
scores
0
value 0.00195
scoring_system epss
scoring_elements 0.41299
published_at 2026-06-06T12:55:00Z
1
value 0.00195
scoring_system epss
scoring_elements 0.41238
published_at 2026-06-08T12:55:00Z
2
value 0.00195
scoring_system epss
scoring_elements 0.41268
published_at 2026-06-07T12:55:00Z
3
value 0.00195
scoring_system epss
scoring_elements 0.41218
published_at 2026-06-04T12:55:00Z
4
value 0.00195
scoring_system epss
scoring_elements 0.41295
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-4172
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/409c8a1208bbb847046a9496303192980f2e6219
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/409c8a1208bbb847046a9496303192980f2e6219
3
reference_url https://huntr.dev/bounties/c041b693-877b-4456-b463-19e4c9456eee
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/c041b693-877b-4456-b463-19e4c9456eee
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-4172
reference_id CVE-2021-4172
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-4172
5
reference_url https://github.com/advisories/GHSA-7x22-pmw5-66mq
reference_id GHSA-7x22-pmw5-66mq
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7x22-pmw5-66mq
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.2
purl pkg:composer/showdoc/showdoc@2.10.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4kd3-qaha-3ybn
1
vulnerability VCID-7aas-2br7-ubfb
2
vulnerability VCID-7fcp-yz8r-pbhf
3
vulnerability VCID-a3zn-fqvn-w3ff
4
vulnerability VCID-agx5-jjj7-gyfr
5
vulnerability VCID-av22-2r6d-kydb
6
vulnerability VCID-chek-rsju-gqfd
7
vulnerability VCID-dghy-4cfc-7kc9
8
vulnerability VCID-dknr-fwjh-g7bw
9
vulnerability VCID-e6cf-bz5b-5fdv
10
vulnerability VCID-gsj9-k61j-1bbs
11
vulnerability VCID-gt4a-2hs9-a7dz
12
vulnerability VCID-h89u-59pk-2fgu
13
vulnerability VCID-mj16-49bu-1fhs
14
vulnerability VCID-ppnh-m1gf-cyfb
15
vulnerability VCID-qwju-19hh-jqbm
16
vulnerability VCID-t22b-135p-yyeb
17
vulnerability VCID-t3xf-e2fb-63dk
18
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.2
aliases CVE-2021-4172, GHSA-7x22-pmw5-66mq
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3wb2-9q5s-5kb4
3
url VCID-4kd3-qaha-3ybn
vulnerability_id VCID-4kd3-qaha-3ybn
summary
Unrestricted Upload of File with Dangerous Type
There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-1034
reference_id
reference_type
scores
0
value 0.00487
scoring_system epss
scoring_elements 0.65862
published_at 2026-06-06T12:55:00Z
1
value 0.00487
scoring_system epss
scoring_elements 0.65838
published_at 2026-06-08T12:55:00Z
2
value 0.00487
scoring_system epss
scoring_elements 0.65848
published_at 2026-06-07T12:55:00Z
3
value 0.00487
scoring_system epss
scoring_elements 0.65797
published_at 2026-06-04T12:55:00Z
4
value 0.00487
scoring_system epss
scoring_elements 0.6585
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-1034
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/bd792a89c0325836fbd64784f4c4117c0171416b
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/bd792a89c0325836fbd64784f4c4117c0171416b
3
reference_url https://huntr.dev/bounties/d205c489-3266-4ac4-acb7-c8ee570887f7
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/d205c489-3266-4ac4-acb7-c8ee570887f7
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-1034
reference_id CVE-2022-1034
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-1034
5
reference_url https://github.com/advisories/GHSA-xp82-jmw8-mjxp
reference_id GHSA-xp82-jmw8-mjxp
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xp82-jmw8-mjxp
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-1034, GHSA-xp82-jmw8-mjxp
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4kd3-qaha-3ybn
4
url VCID-6jnb-hve3-uqhn
vulnerability_id VCID-6jnb-hve3-uqhn
summary showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3993
reference_id
reference_type
scores
0
value 0.00117
scoring_system epss
scoring_elements 0.30121
published_at 2026-06-06T12:55:00Z
1
value 0.00117
scoring_system epss
scoring_elements 0.3006
published_at 2026-06-08T12:55:00Z
2
value 0.00117
scoring_system epss
scoring_elements 0.30089
published_at 2026-06-07T12:55:00Z
3
value 0.00117
scoring_system epss
scoring_elements 0.30084
published_at 2026-06-04T12:55:00Z
4
value 0.00117
scoring_system epss
scoring_elements 0.30157
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3993
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/654e871a3923e79076818a9a03533fe88222c871
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/654e871a3923e79076818a9a03533fe88222c871
3
reference_url https://huntr.dev/bounties/0aa84736-139b-4ae7-becf-604f7f60b1c9
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/0aa84736-139b-4ae7-becf-604f7f60b1c9
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3993
reference_id CVE-2021-3993
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3993
5
reference_url https://github.com/advisories/GHSA-6pqm-xvfc-w7p4
reference_id GHSA-6pqm-xvfc-w7p4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6pqm-xvfc-w7p4
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.9.13
purl pkg:composer/showdoc/showdoc@2.9.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t7f-6es9-k3c8
1
vulnerability VCID-3j53-nrc9-n7as
2
vulnerability VCID-3wb2-9q5s-5kb4
3
vulnerability VCID-4kd3-qaha-3ybn
4
vulnerability VCID-7aas-2br7-ubfb
5
vulnerability VCID-7fcp-yz8r-pbhf
6
vulnerability VCID-a3zn-fqvn-w3ff
7
vulnerability VCID-agx5-jjj7-gyfr
8
vulnerability VCID-av22-2r6d-kydb
9
vulnerability VCID-chek-rsju-gqfd
10
vulnerability VCID-dghy-4cfc-7kc9
11
vulnerability VCID-dknr-fwjh-g7bw
12
vulnerability VCID-e6cf-bz5b-5fdv
13
vulnerability VCID-gsj9-k61j-1bbs
14
vulnerability VCID-gt4a-2hs9-a7dz
15
vulnerability VCID-h89u-59pk-2fgu
16
vulnerability VCID-hb5n-utyp-gqe3
17
vulnerability VCID-mj16-49bu-1fhs
18
vulnerability VCID-pgbx-psys-q7cd
19
vulnerability VCID-ppnh-m1gf-cyfb
20
vulnerability VCID-qwju-19hh-jqbm
21
vulnerability VCID-t22b-135p-yyeb
22
vulnerability VCID-t3xf-e2fb-63dk
23
vulnerability VCID-v4rx-u3kd-dubz
24
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.13
aliases CVE-2021-3993, GHSA-6pqm-xvfc-w7p4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6jnb-hve3-uqhn
5
url VCID-7aas-2br7-ubfb
vulnerability_id VCID-7aas-2br7-ubfb
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0965
reference_id
reference_type
scores
0
value 0.00384
scoring_system epss
scoring_elements 0.59997
published_at 2026-06-07T12:55:00Z
1
value 0.00384
scoring_system epss
scoring_elements 0.60009
published_at 2026-06-06T12:55:00Z
2
value 0.00384
scoring_system epss
scoring_elements 0.60006
published_at 2026-06-05T12:55:00Z
3
value 0.00384
scoring_system epss
scoring_elements 0.5998
published_at 2026-06-08T12:55:00Z
4
value 0.00384
scoring_system epss
scoring_elements 0.59959
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0965
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
3
reference_url https://huntr.dev/bounties/d66c88ce-63e2-4515-a429-8e43a42aa347
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/d66c88ce-63e2-4515-a429-8e43a42aa347
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0965
reference_id CVE-2022-0965
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0965
5
reference_url https://github.com/advisories/GHSA-v8mp-hhjq-h4cj
reference_id GHSA-v8mp-hhjq-h4cj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v8mp-hhjq-h4cj
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0965, GHSA-v8mp-hhjq-h4cj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7aas-2br7-ubfb
6
url VCID-7fcp-yz8r-pbhf
vulnerability_id VCID-7fcp-yz8r-pbhf
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0942
reference_id
reference_type
scores
0
value 0.00344
scoring_system epss
scoring_elements 0.5728
published_at 2026-06-07T12:55:00Z
1
value 0.00344
scoring_system epss
scoring_elements 0.57292
published_at 2026-06-06T12:55:00Z
2
value 0.00344
scoring_system epss
scoring_elements 0.57284
published_at 2026-06-05T12:55:00Z
3
value 0.00344
scoring_system epss
scoring_elements 0.57266
published_at 2026-06-08T12:55:00Z
4
value 0.00344
scoring_system epss
scoring_elements 0.57233
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0942
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
3
reference_url https://huntr.dev/bounties/a412707c-18da-4c84-adc0-9801ed8068c9
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/a412707c-18da-4c84-adc0-9801ed8068c9
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0942
reference_id CVE-2022-0942
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0942
5
reference_url https://github.com/advisories/GHSA-9fcc-7g44-mxrj
reference_id GHSA-9fcc-7g44-mxrj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9fcc-7g44-mxrj
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0942, GHSA-9fcc-7g44-mxrj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7fcp-yz8r-pbhf
7
url VCID-8bw3-usja-9yb8
vulnerability_id VCID-8bw3-usja-9yb8
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0966
reference_id
reference_type
scores
0
value 0.00223
scoring_system epss
scoring_elements 0.45034
published_at 2026-06-07T12:55:00Z
1
value 0.00223
scoring_system epss
scoring_elements 0.45054
published_at 2026-06-06T12:55:00Z
2
value 0.00223
scoring_system epss
scoring_elements 0.45049
published_at 2026-06-05T12:55:00Z
3
value 0.00223
scoring_system epss
scoring_elements 0.45005
published_at 2026-06-08T12:55:00Z
4
value 0.00223
scoring_system epss
scoring_elements 0.44981
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0966
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
3
reference_url https://huntr.dev/bounties/e06c0d55-00a3-4f82-a009-0310b2e402fe
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/e06c0d55-00a3-4f82-a009-0310b2e402fe
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0966
reference_id CVE-2022-0966
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0966
5
reference_url https://github.com/advisories/GHSA-g585-j55v-38h7
reference_id GHSA-g585-j55v-38h7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g585-j55v-38h7
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.4.10
purl pkg:composer/showdoc/showdoc@2.4.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t7f-6es9-k3c8
1
vulnerability VCID-3j53-nrc9-n7as
2
vulnerability VCID-3wb2-9q5s-5kb4
3
vulnerability VCID-4kd3-qaha-3ybn
4
vulnerability VCID-6jnb-hve3-uqhn
5
vulnerability VCID-7aas-2br7-ubfb
6
vulnerability VCID-7fcp-yz8r-pbhf
7
vulnerability VCID-a3zn-fqvn-w3ff
8
vulnerability VCID-agx5-jjj7-gyfr
9
vulnerability VCID-av22-2r6d-kydb
10
vulnerability VCID-bnan-k8zm-eqah
11
vulnerability VCID-bpyz-tsky-t7dy
12
vulnerability VCID-br1f-rp5b-77ce
13
vulnerability VCID-chek-rsju-gqfd
14
vulnerability VCID-dghy-4cfc-7kc9
15
vulnerability VCID-dknr-fwjh-g7bw
16
vulnerability VCID-e6cf-bz5b-5fdv
17
vulnerability VCID-getm-5kfz-c3cj
18
vulnerability VCID-gsj9-k61j-1bbs
19
vulnerability VCID-gt4a-2hs9-a7dz
20
vulnerability VCID-h89u-59pk-2fgu
21
vulnerability VCID-hb5n-utyp-gqe3
22
vulnerability VCID-juxe-8cs4-cyfs
23
vulnerability VCID-mj16-49bu-1fhs
24
vulnerability VCID-nqnp-wv88-w7be
25
vulnerability VCID-pgbx-psys-q7cd
26
vulnerability VCID-ppnh-m1gf-cyfb
27
vulnerability VCID-qwju-19hh-jqbm
28
vulnerability VCID-rsa3-88rf-z7bu
29
vulnerability VCID-t22b-135p-yyeb
30
vulnerability VCID-t3xf-e2fb-63dk
31
vulnerability VCID-tfa3-qmfq-hkfj
32
vulnerability VCID-v4rx-u3kd-dubz
33
vulnerability VCID-wmj7-1w37-43dm
34
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.4.10
1
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0966, GHSA-g585-j55v-38h7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8bw3-usja-9yb8
8
url VCID-a3zn-fqvn-w3ff
vulnerability_id VCID-a3zn-fqvn-w3ff
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0941
reference_id
reference_type
scores
0
value 0.00196
scoring_system epss
scoring_elements 0.41394
published_at 2026-06-07T12:55:00Z
1
value 0.00196
scoring_system epss
scoring_elements 0.41424
published_at 2026-06-06T12:55:00Z
2
value 0.00196
scoring_system epss
scoring_elements 0.4142
published_at 2026-06-05T12:55:00Z
3
value 0.00196
scoring_system epss
scoring_elements 0.41363
published_at 2026-06-08T12:55:00Z
4
value 0.00196
scoring_system epss
scoring_elements 0.41344
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0941
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/4b6e6603c714aab1de346c5f5cb0bbb4c871be1f
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/4b6e6603c714aab1de346c5f5cb0bbb4c871be1f
3
reference_url https://huntr.dev/bounties/040a910e-e689-4fcb-9e4f-95206515d1bc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/040a910e-e689-4fcb-9e4f-95206515d1bc
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0941
reference_id CVE-2022-0941
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0941
5
reference_url https://github.com/advisories/GHSA-wg4r-q74r-p7c8
reference_id GHSA-wg4r-q74r-p7c8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wg4r-q74r-p7c8
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0941, GHSA-wg4r-q74r-p7c8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a3zn-fqvn-w3ff
9
url VCID-agx5-jjj7-gyfr
vulnerability_id VCID-agx5-jjj7-gyfr
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0960
reference_id
reference_type
scores
0
value 0.00388
scoring_system epss
scoring_elements 0.60249
published_at 2026-06-06T12:55:00Z
1
value 0.00388
scoring_system epss
scoring_elements 0.60219
published_at 2026-06-08T12:55:00Z
2
value 0.00388
scoring_system epss
scoring_elements 0.60236
published_at 2026-06-07T12:55:00Z
3
value 0.00388
scoring_system epss
scoring_elements 0.602
published_at 2026-06-04T12:55:00Z
4
value 0.00388
scoring_system epss
scoring_elements 0.60247
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0960
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 9.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/92bc6a83a3a60e01a0d2effb98ab47d8d7eab28f
reference_id
reference_type
scores
0
value 9.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/92bc6a83a3a60e01a0d2effb98ab47d8d7eab28f
3
reference_url https://huntr.dev/bounties/462cd8a7-b1a9-4e93-af71-b56ba1d7ad4e
reference_id
reference_type
scores
0
value 9.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/462cd8a7-b1a9-4e93-af71-b56ba1d7ad4e
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0960
reference_id CVE-2022-0960
reference_type
scores
0
value 9.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0960
5
reference_url https://github.com/advisories/GHSA-rphc-h572-2x9f
reference_id GHSA-rphc-h572-2x9f
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rphc-h572-2x9f
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0960, GHSA-rphc-h572-2x9f
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-agx5-jjj7-gyfr
10
url VCID-av22-2r6d-kydb
vulnerability_id VCID-av22-2r6d-kydb
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0946
reference_id
reference_type
scores
0
value 0.00322
scoring_system epss
scoring_elements 0.556
published_at 2026-06-07T12:55:00Z
1
value 0.00322
scoring_system epss
scoring_elements 0.55613
published_at 2026-06-06T12:55:00Z
2
value 0.00322
scoring_system epss
scoring_elements 0.55607
published_at 2026-06-05T12:55:00Z
3
value 0.00322
scoring_system epss
scoring_elements 0.55581
published_at 2026-06-08T12:55:00Z
4
value 0.00322
scoring_system epss
scoring_elements 0.55551
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0946
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/e5d575928b1371a7e07b09b6592822298335062a
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/e5d575928b1371a7e07b09b6592822298335062a
3
reference_url https://huntr.dev/bounties/1f8f0021-396e-428e-9748-dd4e359715e1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/1f8f0021-396e-428e-9748-dd4e359715e1
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0946
reference_id CVE-2022-0946
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0946
5
reference_url https://github.com/advisories/GHSA-qq74-vgcf-54c3
reference_id GHSA-qq74-vgcf-54c3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qq74-vgcf-54c3
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0946, GHSA-qq74-vgcf-54c3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-av22-2r6d-kydb
11
url VCID-bnan-k8zm-eqah
vulnerability_id VCID-bnan-k8zm-eqah
summary showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3678
reference_id
reference_type
scores
0
value 0.00391
scoring_system epss
scoring_elements 0.60506
published_at 2026-06-08T12:55:00Z
1
value 0.00391
scoring_system epss
scoring_elements 0.60484
published_at 2026-06-04T12:55:00Z
2
value 0.00391
scoring_system epss
scoring_elements 0.60532
published_at 2026-06-05T12:55:00Z
3
value 0.00391
scoring_system epss
scoring_elements 0.60535
published_at 2026-06-06T12:55:00Z
4
value 0.00391
scoring_system epss
scoring_elements 0.60523
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3678
1
reference_url https://github.com/star7th/showdoc/commit/4b962c1740311e0d46775023b6acba39ad60e370
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/4b962c1740311e0d46775023b6acba39ad60e370
2
reference_url https://huntr.dev/bounties/f9a9defd-29ea-4442-b692-ff1512813de4
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/f9a9defd-29ea-4442-b692-ff1512813de4
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3678
reference_id CVE-2021-3678
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3678
4
reference_url https://github.com/advisories/GHSA-j85q-whc9-g4p9
reference_id GHSA-j85q-whc9-g4p9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j85q-whc9-g4p9
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.9.8
purl pkg:composer/showdoc/showdoc@2.9.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t7f-6es9-k3c8
1
vulnerability VCID-3j53-nrc9-n7as
2
vulnerability VCID-3wb2-9q5s-5kb4
3
vulnerability VCID-4kd3-qaha-3ybn
4
vulnerability VCID-6jnb-hve3-uqhn
5
vulnerability VCID-7aas-2br7-ubfb
6
vulnerability VCID-7fcp-yz8r-pbhf
7
vulnerability VCID-a3zn-fqvn-w3ff
8
vulnerability VCID-agx5-jjj7-gyfr
9
vulnerability VCID-av22-2r6d-kydb
10
vulnerability VCID-bpyz-tsky-t7dy
11
vulnerability VCID-br1f-rp5b-77ce
12
vulnerability VCID-chek-rsju-gqfd
13
vulnerability VCID-dghy-4cfc-7kc9
14
vulnerability VCID-dknr-fwjh-g7bw
15
vulnerability VCID-e6cf-bz5b-5fdv
16
vulnerability VCID-getm-5kfz-c3cj
17
vulnerability VCID-gsj9-k61j-1bbs
18
vulnerability VCID-gt4a-2hs9-a7dz
19
vulnerability VCID-h89u-59pk-2fgu
20
vulnerability VCID-hb5n-utyp-gqe3
21
vulnerability VCID-juxe-8cs4-cyfs
22
vulnerability VCID-mj16-49bu-1fhs
23
vulnerability VCID-nqnp-wv88-w7be
24
vulnerability VCID-pgbx-psys-q7cd
25
vulnerability VCID-ppnh-m1gf-cyfb
26
vulnerability VCID-qwju-19hh-jqbm
27
vulnerability VCID-rsa3-88rf-z7bu
28
vulnerability VCID-t22b-135p-yyeb
29
vulnerability VCID-t3xf-e2fb-63dk
30
vulnerability VCID-v4rx-u3kd-dubz
31
vulnerability VCID-wmj7-1w37-43dm
32
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.8
aliases CVE-2021-3678, GHSA-j85q-whc9-g4p9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bnan-k8zm-eqah
12
url VCID-bpyz-tsky-t7dy
vulnerability_id VCID-bpyz-tsky-t7dy
summary
URL Redirection to Untrusted Site ('Open Redirect')
showdoc is vulnerable to URL Redirection to Untrusted Site
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3989
reference_id
reference_type
scores
0
value 0.00207
scoring_system epss
scoring_elements 0.43151
published_at 2026-06-06T12:55:00Z
1
value 0.00207
scoring_system epss
scoring_elements 0.43095
published_at 2026-06-08T12:55:00Z
2
value 0.00207
scoring_system epss
scoring_elements 0.4313
published_at 2026-06-07T12:55:00Z
3
value 0.00207
scoring_system epss
scoring_elements 0.4307
published_at 2026-06-04T12:55:00Z
4
value 0.00207
scoring_system epss
scoring_elements 0.43143
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3989
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/335afc7ed6d6627c3d0434aa9acc168c77117614
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/335afc7ed6d6627c3d0434aa9acc168c77117614
3
reference_url https://huntr.dev/bounties/ffc61eff-efea-42c5-92c2-e043fdf904d5
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/ffc61eff-efea-42c5-92c2-e043fdf904d5
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3989
reference_id CVE-2021-3989
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3989
5
reference_url https://github.com/advisories/GHSA-f545-vpwp-r9j7
reference_id GHSA-f545-vpwp-r9j7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f545-vpwp-r9j7
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.9.13
purl pkg:composer/showdoc/showdoc@2.9.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t7f-6es9-k3c8
1
vulnerability VCID-3j53-nrc9-n7as
2
vulnerability VCID-3wb2-9q5s-5kb4
3
vulnerability VCID-4kd3-qaha-3ybn
4
vulnerability VCID-7aas-2br7-ubfb
5
vulnerability VCID-7fcp-yz8r-pbhf
6
vulnerability VCID-a3zn-fqvn-w3ff
7
vulnerability VCID-agx5-jjj7-gyfr
8
vulnerability VCID-av22-2r6d-kydb
9
vulnerability VCID-chek-rsju-gqfd
10
vulnerability VCID-dghy-4cfc-7kc9
11
vulnerability VCID-dknr-fwjh-g7bw
12
vulnerability VCID-e6cf-bz5b-5fdv
13
vulnerability VCID-gsj9-k61j-1bbs
14
vulnerability VCID-gt4a-2hs9-a7dz
15
vulnerability VCID-h89u-59pk-2fgu
16
vulnerability VCID-hb5n-utyp-gqe3
17
vulnerability VCID-mj16-49bu-1fhs
18
vulnerability VCID-pgbx-psys-q7cd
19
vulnerability VCID-ppnh-m1gf-cyfb
20
vulnerability VCID-qwju-19hh-jqbm
21
vulnerability VCID-t22b-135p-yyeb
22
vulnerability VCID-t3xf-e2fb-63dk
23
vulnerability VCID-v4rx-u3kd-dubz
24
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.13
aliases CVE-2021-3989, GHSA-f545-vpwp-r9j7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bpyz-tsky-t7dy
13
url VCID-br1f-rp5b-77ce
vulnerability_id VCID-br1f-rp5b-77ce
summary
Inadequate Encryption Strength
showdoc is vulnerable to Missing Cryptographic Step
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3680
reference_id
reference_type
scores
0
value 0.00099
scoring_system epss
scoring_elements 0.27191
published_at 2026-06-05T12:55:00Z
1
value 0.00099
scoring_system epss
scoring_elements 0.27048
published_at 2026-06-08T12:55:00Z
2
value 0.00099
scoring_system epss
scoring_elements 0.27097
published_at 2026-06-07T12:55:00Z
3
value 0.00099
scoring_system epss
scoring_elements 0.27126
published_at 2026-06-04T12:55:00Z
4
value 0.00099
scoring_system epss
scoring_elements 0.27137
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3680
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/blob/fd1740234a12804b45af9cac3563567d83ba414d/server/Application/Home/Model/UserModel.class.php#L20
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/blob/fd1740234a12804b45af9cac3563567d83ba414d/server/Application/Home/Model/UserModel.class.php#L20
3
reference_url https://github.com/star7th/showdoc/commit/4b962c1740311e0d46775023b6acba39ad60e370
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/4b962c1740311e0d46775023b6acba39ad60e370
4
reference_url https://huntr.dev/bounties/76b49607-fba9-4100-9be7-cb459fe6cfe2
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/76b49607-fba9-4100-9be7-cb459fe6cfe2
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3680
reference_id CVE-2021-3680
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3680
6
reference_url https://github.com/advisories/GHSA-8vh3-29mr-m9xg
reference_id GHSA-8vh3-29mr-m9xg
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8vh3-29mr-m9xg
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.9.8
purl pkg:composer/showdoc/showdoc@2.9.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t7f-6es9-k3c8
1
vulnerability VCID-3j53-nrc9-n7as
2
vulnerability VCID-3wb2-9q5s-5kb4
3
vulnerability VCID-4kd3-qaha-3ybn
4
vulnerability VCID-6jnb-hve3-uqhn
5
vulnerability VCID-7aas-2br7-ubfb
6
vulnerability VCID-7fcp-yz8r-pbhf
7
vulnerability VCID-a3zn-fqvn-w3ff
8
vulnerability VCID-agx5-jjj7-gyfr
9
vulnerability VCID-av22-2r6d-kydb
10
vulnerability VCID-bpyz-tsky-t7dy
11
vulnerability VCID-br1f-rp5b-77ce
12
vulnerability VCID-chek-rsju-gqfd
13
vulnerability VCID-dghy-4cfc-7kc9
14
vulnerability VCID-dknr-fwjh-g7bw
15
vulnerability VCID-e6cf-bz5b-5fdv
16
vulnerability VCID-getm-5kfz-c3cj
17
vulnerability VCID-gsj9-k61j-1bbs
18
vulnerability VCID-gt4a-2hs9-a7dz
19
vulnerability VCID-h89u-59pk-2fgu
20
vulnerability VCID-hb5n-utyp-gqe3
21
vulnerability VCID-juxe-8cs4-cyfs
22
vulnerability VCID-mj16-49bu-1fhs
23
vulnerability VCID-nqnp-wv88-w7be
24
vulnerability VCID-pgbx-psys-q7cd
25
vulnerability VCID-ppnh-m1gf-cyfb
26
vulnerability VCID-qwju-19hh-jqbm
27
vulnerability VCID-rsa3-88rf-z7bu
28
vulnerability VCID-t22b-135p-yyeb
29
vulnerability VCID-t3xf-e2fb-63dk
30
vulnerability VCID-v4rx-u3kd-dubz
31
vulnerability VCID-wmj7-1w37-43dm
32
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.8
aliases CVE-2021-3680, GHSA-8vh3-29mr-m9xg
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-br1f-rp5b-77ce
14
url VCID-chek-rsju-gqfd
vulnerability_id VCID-chek-rsju-gqfd
summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
A SQL injection vulnerability was found in showdoc.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0362
reference_id
reference_type
scores
0
value 0.00274
scoring_system epss
scoring_elements 0.51068
published_at 2026-06-06T12:55:00Z
1
value 0.00274
scoring_system epss
scoring_elements 0.51016
published_at 2026-06-08T12:55:00Z
2
value 0.00274
scoring_system epss
scoring_elements 0.51046
published_at 2026-06-07T12:55:00Z
3
value 0.00274
scoring_system epss
scoring_elements 0.51001
published_at 2026-06-04T12:55:00Z
4
value 0.00274
scoring_system epss
scoring_elements 0.51063
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0362
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/2b34e267e4186125f99bfa420140634ad45801fb
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/2b34e267e4186125f99bfa420140634ad45801fb
3
reference_url https://huntr.dev/bounties/e7c72417-eb8f-416c-8480-be76ac0a9091
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/e7c72417-eb8f-416c-8480-be76ac0a9091
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0362
reference_id CVE-2022-0362
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0362
5
reference_url https://github.com/advisories/GHSA-9cq5-xgg4-x477
reference_id GHSA-9cq5-xgg4-x477
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9cq5-xgg4-x477
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.3
purl pkg:composer/showdoc/showdoc@2.10.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3j53-nrc9-n7as
1
vulnerability VCID-4kd3-qaha-3ybn
2
vulnerability VCID-7aas-2br7-ubfb
3
vulnerability VCID-7fcp-yz8r-pbhf
4
vulnerability VCID-a3zn-fqvn-w3ff
5
vulnerability VCID-agx5-jjj7-gyfr
6
vulnerability VCID-av22-2r6d-kydb
7
vulnerability VCID-dghy-4cfc-7kc9
8
vulnerability VCID-dknr-fwjh-g7bw
9
vulnerability VCID-e6cf-bz5b-5fdv
10
vulnerability VCID-gsj9-k61j-1bbs
11
vulnerability VCID-gt4a-2hs9-a7dz
12
vulnerability VCID-h89u-59pk-2fgu
13
vulnerability VCID-mj16-49bu-1fhs
14
vulnerability VCID-ppnh-m1gf-cyfb
15
vulnerability VCID-qwju-19hh-jqbm
16
vulnerability VCID-t22b-135p-yyeb
17
vulnerability VCID-t3xf-e2fb-63dk
18
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.3
aliases CVE-2022-0362, GHSA-9cq5-xgg4-x477
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-chek-rsju-gqfd
15
url VCID-dghy-4cfc-7kc9
vulnerability_id VCID-dghy-4cfc-7kc9
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0957
reference_id
reference_type
scores
0
value 0.00305
scoring_system epss
scoring_elements 0.54118
published_at 2026-06-07T12:55:00Z
1
value 0.00305
scoring_system epss
scoring_elements 0.54129
published_at 2026-06-06T12:55:00Z
2
value 0.00305
scoring_system epss
scoring_elements 0.54121
published_at 2026-06-05T12:55:00Z
3
value 0.00305
scoring_system epss
scoring_elements 0.54095
published_at 2026-06-08T12:55:00Z
4
value 0.00305
scoring_system epss
scoring_elements 0.54064
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0957
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/d1c9ed0d77ea5d56f09be0c492361dca8af745bb
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/d1c9ed0d77ea5d56f09be0c492361dca8af745bb
3
reference_url https://github.com/star7th/showdoc/pull/1632
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/pull/1632
4
reference_url https://huntr.dev/bounties/b4918d45-b635-40db-bb4b-34035e1aca21
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/b4918d45-b635-40db-bb4b-34035e1aca21
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0957
reference_id CVE-2022-0957
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0957
6
reference_url https://github.com/advisories/GHSA-q73m-3q7r-fpf7
reference_id GHSA-q73m-3q7r-fpf7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q73m-3q7r-fpf7
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0957, GHSA-q73m-3q7r-fpf7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dghy-4cfc-7kc9
16
url VCID-dknr-fwjh-g7bw
vulnerability_id VCID-dknr-fwjh-g7bw
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0945
reference_id
reference_type
scores
0
value 0.0035
scoring_system epss
scoring_elements 0.57794
published_at 2026-06-07T12:55:00Z
1
value 0.0035
scoring_system epss
scoring_elements 0.57804
published_at 2026-06-06T12:55:00Z
2
value 0.0035
scoring_system epss
scoring_elements 0.57796
published_at 2026-06-05T12:55:00Z
3
value 0.0035
scoring_system epss
scoring_elements 0.5778
published_at 2026-06-08T12:55:00Z
4
value 0.0035
scoring_system epss
scoring_elements 0.57744
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0945
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/ba45d19e1d77a7eea866dab30eff5da552694891
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/ba45d19e1d77a7eea866dab30eff5da552694891
3
reference_url https://huntr.dev/bounties/8702e2bf-4af2-4391-b651-c8c89e7d089e
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/8702e2bf-4af2-4391-b651-c8c89e7d089e
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0945
reference_id CVE-2022-0945
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0945
5
reference_url https://github.com/advisories/GHSA-vpwq-6cp4-ffqc
reference_id GHSA-vpwq-6cp4-ffqc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vpwq-6cp4-ffqc
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0945, GHSA-vpwq-6cp4-ffqc
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dknr-fwjh-g7bw
17
url VCID-e6cf-bz5b-5fdv
vulnerability_id VCID-e6cf-bz5b-5fdv
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0938
reference_id
reference_type
scores
0
value 0.00207
scoring_system epss
scoring_elements 0.43093
published_at 2026-06-07T12:55:00Z
1
value 0.00207
scoring_system epss
scoring_elements 0.43114
published_at 2026-06-06T12:55:00Z
2
value 0.00207
scoring_system epss
scoring_elements 0.43105
published_at 2026-06-05T12:55:00Z
3
value 0.00207
scoring_system epss
scoring_elements 0.43057
published_at 2026-06-08T12:55:00Z
4
value 0.00207
scoring_system epss
scoring_elements 0.43032
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0938
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/830c89a4c2c5fd0dd491422bf8e97b4eb5713f55
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/830c89a4c2c5fd0dd491422bf8e97b4eb5713f55
3
reference_url https://huntr.dev/bounties/3eb5a8f9-24e3-4eae-a212-070b2fbc237e
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/3eb5a8f9-24e3-4eae-a212-070b2fbc237e
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0938
reference_id CVE-2022-0938
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0938
5
reference_url https://github.com/advisories/GHSA-mw75-qvfr-hpmr
reference_id GHSA-mw75-qvfr-hpmr
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mw75-qvfr-hpmr
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0938, GHSA-mw75-qvfr-hpmr
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e6cf-bz5b-5fdv
18
url VCID-getm-5kfz-c3cj
vulnerability_id VCID-getm-5kfz-c3cj
summary showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3776
reference_id
reference_type
scores
0
value 0.00112
scoring_system epss
scoring_elements 0.29173
published_at 2026-06-08T12:55:00Z
1
value 0.00112
scoring_system epss
scoring_elements 0.29206
published_at 2026-06-07T12:55:00Z
2
value 0.00112
scoring_system epss
scoring_elements 0.29205
published_at 2026-06-04T12:55:00Z
3
value 0.00112
scoring_system epss
scoring_elements 0.29242
published_at 2026-06-06T12:55:00Z
4
value 0.00112
scoring_system epss
scoring_elements 0.29275
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3776
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/67093c879a6563aa6ee08003177777d1975e2351
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/67093c879a6563aa6ee08003177777d1975e2351
3
reference_url https://huntr.dev/bounties/e0edf27d-437e-44fe-907a-df020f385304
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/e0edf27d-437e-44fe-907a-df020f385304
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3776
reference_id CVE-2021-3776
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3776
5
reference_url https://github.com/advisories/GHSA-m4hj-wg2r-qpcr
reference_id GHSA-m4hj-wg2r-qpcr
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m4hj-wg2r-qpcr
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.9.13
purl pkg:composer/showdoc/showdoc@2.9.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t7f-6es9-k3c8
1
vulnerability VCID-3j53-nrc9-n7as
2
vulnerability VCID-3wb2-9q5s-5kb4
3
vulnerability VCID-4kd3-qaha-3ybn
4
vulnerability VCID-7aas-2br7-ubfb
5
vulnerability VCID-7fcp-yz8r-pbhf
6
vulnerability VCID-a3zn-fqvn-w3ff
7
vulnerability VCID-agx5-jjj7-gyfr
8
vulnerability VCID-av22-2r6d-kydb
9
vulnerability VCID-chek-rsju-gqfd
10
vulnerability VCID-dghy-4cfc-7kc9
11
vulnerability VCID-dknr-fwjh-g7bw
12
vulnerability VCID-e6cf-bz5b-5fdv
13
vulnerability VCID-gsj9-k61j-1bbs
14
vulnerability VCID-gt4a-2hs9-a7dz
15
vulnerability VCID-h89u-59pk-2fgu
16
vulnerability VCID-hb5n-utyp-gqe3
17
vulnerability VCID-mj16-49bu-1fhs
18
vulnerability VCID-pgbx-psys-q7cd
19
vulnerability VCID-ppnh-m1gf-cyfb
20
vulnerability VCID-qwju-19hh-jqbm
21
vulnerability VCID-t22b-135p-yyeb
22
vulnerability VCID-t3xf-e2fb-63dk
23
vulnerability VCID-v4rx-u3kd-dubz
24
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.13
aliases CVE-2021-3776, GHSA-m4hj-wg2r-qpcr
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-getm-5kfz-c3cj
19
url VCID-gsj9-k61j-1bbs
vulnerability_id VCID-gsj9-k61j-1bbs
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0937
reference_id
reference_type
scores
0
value 0.00181
scoring_system epss
scoring_elements 0.39594
published_at 2026-06-07T12:55:00Z
1
value 0.00181
scoring_system epss
scoring_elements 0.39622
published_at 2026-06-06T12:55:00Z
2
value 0.00181
scoring_system epss
scoring_elements 0.39618
published_at 2026-06-05T12:55:00Z
3
value 0.00181
scoring_system epss
scoring_elements 0.39566
published_at 2026-06-08T12:55:00Z
4
value 0.00181
scoring_system epss
scoring_elements 0.39532
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0937
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/42c0d9813df3035728b36116a6ce9116e6fa8ed3
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/42c0d9813df3035728b36116a6ce9116e6fa8ed3
3
reference_url https://huntr.dev/bounties/6127739d-f4f2-44cd-ae3d-e3ccb7f0d7b5
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/6127739d-f4f2-44cd-ae3d-e3ccb7f0d7b5
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0937
reference_id CVE-2022-0937
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0937
5
reference_url https://github.com/advisories/GHSA-mg5h-9rhq-4cqx
reference_id GHSA-mg5h-9rhq-4cqx
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mg5h-9rhq-4cqx
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0937, GHSA-mg5h-9rhq-4cqx
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gsj9-k61j-1bbs
20
url VCID-gt4a-2hs9-a7dz
vulnerability_id VCID-gt4a-2hs9-a7dz
summary
ShowDoc has an Injection vulnerability
A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a manipulation of the argument pages can lead to sql injection. The attack may be launched remotely. Upgrading to version 3.8.1 addresses this issue. It is suggested to upgrade the affected component. According to the researcher, "[t]he vendor explicitly stated they will not backport patches to the older affected versions."
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-6982
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.0182
published_at 2026-06-06T12:55:00Z
1
value 0.00012
scoring_system epss
scoring_elements 0.01804
published_at 2026-06-08T12:55:00Z
2
value 0.00012
scoring_system epss
scoring_elements 0.01814
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-6982
1
reference_url https://gist.github.com/saDL0w/555e19668264f98d96259ad47ea33811
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
3
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
4
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
5
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
6
value MODERATE
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T13:18:53Z/
url https://gist.github.com/saDL0w/555e19668264f98d96259ad47ea33811
2
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
3
reference_url https://github.com/star7th/showdoc/releases/tag/v3.8.1
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
3
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
4
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
5
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
6
value MODERATE
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T13:18:53Z/
url https://github.com/star7th/showdoc/releases/tag/v3.8.1
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-6982
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-6982
5
reference_url https://vuldb.com/submit/795528
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
3
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
4
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
5
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
6
value MODERATE
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T13:18:53Z/
url https://vuldb.com/submit/795528
6
reference_url https://vuldb.com/vuln/359525
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
4
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
5
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
6
value MODERATE
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T13:18:53Z/
url https://vuldb.com/vuln/359525
7
reference_url https://vuldb.com/vuln/359525/cti
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
3
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
4
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
5
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
6
value MODERATE
scoring_system generic_textual
scoring_elements
7
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T13:18:53Z/
url https://vuldb.com/vuln/359525/cti
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:showdoc:showdoc:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:showdoc:showdoc:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:showdoc:showdoc:*:*:*:*:*:*:*:*
9
reference_url https://github.com/advisories/GHSA-fm5r-cj7v-rj2c
reference_id GHSA-fm5r-cj7v-rj2c
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-fm5r-cj7v-rj2c
fixed_packages
0
url pkg:composer/showdoc/showdoc@3.8.1
purl pkg:composer/showdoc/showdoc@3.8.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@3.8.1
aliases CVE-2026-6982, GHSA-fm5r-cj7v-rj2c
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gt4a-2hs9-a7dz
21
url VCID-h89u-59pk-2fgu
vulnerability_id VCID-h89u-59pk-2fgu
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0940
reference_id
reference_type
scores
0
value 0.00191
scoring_system epss
scoring_elements 0.40912
published_at 2026-06-07T12:55:00Z
1
value 0.00191
scoring_system epss
scoring_elements 0.40943
published_at 2026-06-06T12:55:00Z
2
value 0.00191
scoring_system epss
scoring_elements 0.40938
published_at 2026-06-05T12:55:00Z
3
value 0.00191
scoring_system epss
scoring_elements 0.40881
published_at 2026-06-08T12:55:00Z
4
value 0.00191
scoring_system epss
scoring_elements 0.40861
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0940
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/78522520892d4e29cc94148c6ec84a204a607b73
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/78522520892d4e29cc94148c6ec84a204a607b73
3
reference_url https://huntr.dev/bounties/856bd2e2-db4f-4b7d-9927-222261ae3782
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/856bd2e2-db4f-4b7d-9927-222261ae3782
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0940
reference_id CVE-2022-0940
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0940
5
reference_url https://github.com/advisories/GHSA-82j4-vr25-x394
reference_id GHSA-82j4-vr25-x394
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-82j4-vr25-x394
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0940, GHSA-82j4-vr25-x394
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h89u-59pk-2fgu
22
url VCID-hb5n-utyp-gqe3
vulnerability_id VCID-hb5n-utyp-gqe3
summary
URL Redirection to Untrusted Site ('Open Redirect')
showdoc is vulnerable to URL Redirection to Untrusted Site
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-4000
reference_id
reference_type
scores
0
value 0.00196
scoring_system epss
scoring_elements 0.41458
published_at 2026-06-06T12:55:00Z
1
value 0.00196
scoring_system epss
scoring_elements 0.41398
published_at 2026-06-08T12:55:00Z
2
value 0.00196
scoring_system epss
scoring_elements 0.41429
published_at 2026-06-07T12:55:00Z
3
value 0.00196
scoring_system epss
scoring_elements 0.41379
published_at 2026-06-04T12:55:00Z
4
value 0.00196
scoring_system epss
scoring_elements 0.41454
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-4000
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/c7f10033eba5f2b5a537f9af9ba2379138e67138
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/c7f10033eba5f2b5a537f9af9ba2379138e67138
3
reference_url https://huntr.dev/bounties/e4d803e0-3104-432c-80b3-34bc453c8962
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/e4d803e0-3104-432c-80b3-34bc453c8962
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-4000
reference_id CVE-2021-4000
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-4000
5
reference_url https://github.com/advisories/GHSA-8c9x-wfgj-v78w
reference_id GHSA-8c9x-wfgj-v78w
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8c9x-wfgj-v78w
fixed_packages
aliases CVE-2021-4000, GHSA-8c9x-wfgj-v78w
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hb5n-utyp-gqe3
23
url VCID-juxe-8cs4-cyfs
vulnerability_id VCID-juxe-8cs4-cyfs
summary showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3775
reference_id
reference_type
scores
0
value 0.00112
scoring_system epss
scoring_elements 0.29242
published_at 2026-06-06T12:55:00Z
1
value 0.00112
scoring_system epss
scoring_elements 0.29173
published_at 2026-06-08T12:55:00Z
2
value 0.00112
scoring_system epss
scoring_elements 0.29206
published_at 2026-06-07T12:55:00Z
3
value 0.00112
scoring_system epss
scoring_elements 0.29205
published_at 2026-06-04T12:55:00Z
4
value 0.00112
scoring_system epss
scoring_elements 0.29275
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3775
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/67093c879a6563aa6ee08003177777d1975e2351
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/67093c879a6563aa6ee08003177777d1975e2351
3
reference_url https://huntr.dev/bounties/6a59d203-4ca7-4aed-bdb9-1e39b66c77b3
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/6a59d203-4ca7-4aed-bdb9-1e39b66c77b3
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3775
reference_id CVE-2021-3775
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3775
5
reference_url https://github.com/advisories/GHSA-pjjf-hc4q-g298
reference_id GHSA-pjjf-hc4q-g298
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pjjf-hc4q-g298
fixed_packages
aliases CVE-2021-3775, GHSA-pjjf-hc4q-g298
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-juxe-8cs4-cyfs
24
url VCID-mj16-49bu-1fhs
vulnerability_id VCID-mj16-49bu-1fhs
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0964
reference_id
reference_type
scores
0
value 0.00384
scoring_system epss
scoring_elements 0.59997
published_at 2026-06-07T12:55:00Z
1
value 0.00384
scoring_system epss
scoring_elements 0.60009
published_at 2026-06-06T12:55:00Z
2
value 0.00384
scoring_system epss
scoring_elements 0.60006
published_at 2026-06-05T12:55:00Z
3
value 0.00384
scoring_system epss
scoring_elements 0.5998
published_at 2026-06-08T12:55:00Z
4
value 0.00384
scoring_system epss
scoring_elements 0.59959
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0964
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
3
reference_url https://huntr.dev/bounties/dbe39998-8eb7-46ea-997f-7b27f6f16ea0
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/dbe39998-8eb7-46ea-997f-7b27f6f16ea0
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0964
reference_id CVE-2022-0964
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0964
5
reference_url https://github.com/advisories/GHSA-xm3x-787m-p66r
reference_id GHSA-xm3x-787m-p66r
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xm3x-787m-p66r
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0964, GHSA-xm3x-787m-p66r
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mj16-49bu-1fhs
25
url VCID-nqnp-wv88-w7be
vulnerability_id VCID-nqnp-wv88-w7be
summary showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3990
reference_id
reference_type
scores
0
value 0.00301
scoring_system epss
scoring_elements 0.53801
published_at 2026-06-06T12:55:00Z
1
value 0.00301
scoring_system epss
scoring_elements 0.53765
published_at 2026-06-08T12:55:00Z
2
value 0.00301
scoring_system epss
scoring_elements 0.53789
published_at 2026-06-07T12:55:00Z
3
value 0.00301
scoring_system epss
scoring_elements 0.53734
published_at 2026-06-04T12:55:00Z
4
value 0.00301
scoring_system epss
scoring_elements 0.53792
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3990
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/a9886f26c08225e0adca75c67dfca3f7c42b87d0
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/a9886f26c08225e0adca75c67dfca3f7c42b87d0
3
reference_url https://huntr.dev/bounties/0680067d-56a7-4412-b06e-a267e850ae9f
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/0680067d-56a7-4412-b06e-a267e850ae9f
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3990
reference_id CVE-2021-3990
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3990
5
reference_url https://github.com/advisories/GHSA-vrgh-5w3c-ggf8
reference_id GHSA-vrgh-5w3c-ggf8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vrgh-5w3c-ggf8
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.9.13
purl pkg:composer/showdoc/showdoc@2.9.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t7f-6es9-k3c8
1
vulnerability VCID-3j53-nrc9-n7as
2
vulnerability VCID-3wb2-9q5s-5kb4
3
vulnerability VCID-4kd3-qaha-3ybn
4
vulnerability VCID-7aas-2br7-ubfb
5
vulnerability VCID-7fcp-yz8r-pbhf
6
vulnerability VCID-a3zn-fqvn-w3ff
7
vulnerability VCID-agx5-jjj7-gyfr
8
vulnerability VCID-av22-2r6d-kydb
9
vulnerability VCID-chek-rsju-gqfd
10
vulnerability VCID-dghy-4cfc-7kc9
11
vulnerability VCID-dknr-fwjh-g7bw
12
vulnerability VCID-e6cf-bz5b-5fdv
13
vulnerability VCID-gsj9-k61j-1bbs
14
vulnerability VCID-gt4a-2hs9-a7dz
15
vulnerability VCID-h89u-59pk-2fgu
16
vulnerability VCID-hb5n-utyp-gqe3
17
vulnerability VCID-mj16-49bu-1fhs
18
vulnerability VCID-pgbx-psys-q7cd
19
vulnerability VCID-ppnh-m1gf-cyfb
20
vulnerability VCID-qwju-19hh-jqbm
21
vulnerability VCID-t22b-135p-yyeb
22
vulnerability VCID-t3xf-e2fb-63dk
23
vulnerability VCID-v4rx-u3kd-dubz
24
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.13
aliases CVE-2021-3990, GHSA-vrgh-5w3c-ggf8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nqnp-wv88-w7be
26
url VCID-pgbx-psys-q7cd
vulnerability_id VCID-pgbx-psys-q7cd
summary showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-4168
reference_id
reference_type
scores
0
value 0.00105
scoring_system epss
scoring_elements 0.28029
published_at 2026-06-06T12:55:00Z
1
value 0.00105
scoring_system epss
scoring_elements 0.27949
published_at 2026-06-08T12:55:00Z
2
value 0.00105
scoring_system epss
scoring_elements 0.27992
published_at 2026-06-07T12:55:00Z
3
value 0.00105
scoring_system epss
scoring_elements 0.2801
published_at 2026-06-04T12:55:00Z
4
value 0.00105
scoring_system epss
scoring_elements 0.2808
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-4168
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/3ff0c85d439ccbdfadeb96b5a52acf6318041109
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/3ff0c85d439ccbdfadeb96b5a52acf6318041109
3
reference_url https://huntr.dev/bounties/f14431e2-f1f6-4331-ba91-a4ea8b26be0c
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/f14431e2-f1f6-4331-ba91-a4ea8b26be0c
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-4168
reference_id CVE-2021-4168
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-4168
5
reference_url https://github.com/advisories/GHSA-7vxc-chqj-h83g
reference_id GHSA-7vxc-chqj-h83g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7vxc-chqj-h83g
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.9.15
purl pkg:composer/showdoc/showdoc@2.9.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t7f-6es9-k3c8
1
vulnerability VCID-3j53-nrc9-n7as
2
vulnerability VCID-3wb2-9q5s-5kb4
3
vulnerability VCID-4kd3-qaha-3ybn
4
vulnerability VCID-7aas-2br7-ubfb
5
vulnerability VCID-7fcp-yz8r-pbhf
6
vulnerability VCID-a3zn-fqvn-w3ff
7
vulnerability VCID-agx5-jjj7-gyfr
8
vulnerability VCID-av22-2r6d-kydb
9
vulnerability VCID-chek-rsju-gqfd
10
vulnerability VCID-dghy-4cfc-7kc9
11
vulnerability VCID-dknr-fwjh-g7bw
12
vulnerability VCID-e6cf-bz5b-5fdv
13
vulnerability VCID-gsj9-k61j-1bbs
14
vulnerability VCID-gt4a-2hs9-a7dz
15
vulnerability VCID-h89u-59pk-2fgu
16
vulnerability VCID-mj16-49bu-1fhs
17
vulnerability VCID-ppnh-m1gf-cyfb
18
vulnerability VCID-qwju-19hh-jqbm
19
vulnerability VCID-t22b-135p-yyeb
20
vulnerability VCID-t3xf-e2fb-63dk
21
vulnerability VCID-v4rx-u3kd-dubz
22
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.15
aliases CVE-2021-4168, GHSA-7vxc-chqj-h83g
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pgbx-psys-q7cd
27
url VCID-ppnh-m1gf-cyfb
vulnerability_id VCID-ppnh-m1gf-cyfb
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0956
reference_id
reference_type
scores
0
value 0.00337
scoring_system epss
scoring_elements 0.56854
published_at 2026-06-07T12:55:00Z
1
value 0.00337
scoring_system epss
scoring_elements 0.56866
published_at 2026-06-06T12:55:00Z
2
value 0.00337
scoring_system epss
scoring_elements 0.56858
published_at 2026-06-05T12:55:00Z
3
value 0.00337
scoring_system epss
scoring_elements 0.56839
published_at 2026-06-08T12:55:00Z
4
value 0.00337
scoring_system epss
scoring_elements 0.56807
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0956
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/56e450c3adf75c707500d7231a78c9fc894c7f13
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/56e450c3adf75c707500d7231a78c9fc894c7f13
3
reference_url https://huntr.dev/bounties/5b0e3f02-309f-4b59-8020-d7ac0f1999f2
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/5b0e3f02-309f-4b59-8020-d7ac0f1999f2
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0956
reference_id CVE-2022-0956
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0956
5
reference_url https://github.com/advisories/GHSA-wg8p-w946-c482
reference_id GHSA-wg8p-w946-c482
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wg8p-w946-c482
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0956, GHSA-wg8p-w946-c482
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ppnh-m1gf-cyfb
28
url VCID-qwju-19hh-jqbm
vulnerability_id VCID-qwju-19hh-jqbm
summary
Stored Cross-site Scripting in showdoc
Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0967
reference_id
reference_type
scores
0
value 0.00831
scoring_system epss
scoring_elements 0.74965
published_at 2026-06-06T12:55:00Z
1
value 0.00831
scoring_system epss
scoring_elements 0.74942
published_at 2026-06-08T12:55:00Z
2
value 0.00831
scoring_system epss
scoring_elements 0.74958
published_at 2026-06-07T12:55:00Z
3
value 0.00831
scoring_system epss
scoring_elements 0.74934
published_at 2026-06-04T12:55:00Z
4
value 0.00831
scoring_system epss
scoring_elements 0.74961
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0967
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
3
reference_url https://huntr.dev/bounties/9dea3c98-7609-480d-902d-149067bd1e2a
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/9dea3c98-7609-480d-902d-149067bd1e2a
4
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/50941.txt
reference_id CVE-2022-0967
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/50941.txt
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0967
reference_id CVE-2022-0967
reference_type
scores
0
value 6.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0967
6
reference_url https://github.com/advisories/GHSA-3pg8-c473-w6rr
reference_id GHSA-3pg8-c473-w6rr
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3pg8-c473-w6rr
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0967, GHSA-3pg8-c473-w6rr
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qwju-19hh-jqbm
29
url VCID-rsa3-88rf-z7bu
vulnerability_id VCID-rsa3-88rf-z7bu
summary showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-4017
reference_id
reference_type
scores
0
value 0.00142
scoring_system epss
scoring_elements 0.34135
published_at 2026-06-06T12:55:00Z
1
value 0.00142
scoring_system epss
scoring_elements 0.34068
published_at 2026-06-08T12:55:00Z
2
value 0.00142
scoring_system epss
scoring_elements 0.34102
published_at 2026-06-07T12:55:00Z
3
value 0.00142
scoring_system epss
scoring_elements 0.34019
published_at 2026-06-04T12:55:00Z
4
value 0.00142
scoring_system epss
scoring_elements 0.3412
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-4017
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/654e871a3923e79076818a9a03533fe88222c871
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/654e871a3923e79076818a9a03533fe88222c871
3
reference_url https://huntr.dev/bounties/1d8439e8-b3f7-40f8-8b30-f9cb05ff2bcd
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/1d8439e8-b3f7-40f8-8b30-f9cb05ff2bcd
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-4017
reference_id CVE-2021-4017
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-4017
5
reference_url https://github.com/advisories/GHSA-f77h-m9w2-vvg2
reference_id GHSA-f77h-m9w2-vvg2
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f77h-m9w2-vvg2
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.9.13
purl pkg:composer/showdoc/showdoc@2.9.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t7f-6es9-k3c8
1
vulnerability VCID-3j53-nrc9-n7as
2
vulnerability VCID-3wb2-9q5s-5kb4
3
vulnerability VCID-4kd3-qaha-3ybn
4
vulnerability VCID-7aas-2br7-ubfb
5
vulnerability VCID-7fcp-yz8r-pbhf
6
vulnerability VCID-a3zn-fqvn-w3ff
7
vulnerability VCID-agx5-jjj7-gyfr
8
vulnerability VCID-av22-2r6d-kydb
9
vulnerability VCID-chek-rsju-gqfd
10
vulnerability VCID-dghy-4cfc-7kc9
11
vulnerability VCID-dknr-fwjh-g7bw
12
vulnerability VCID-e6cf-bz5b-5fdv
13
vulnerability VCID-gsj9-k61j-1bbs
14
vulnerability VCID-gt4a-2hs9-a7dz
15
vulnerability VCID-h89u-59pk-2fgu
16
vulnerability VCID-hb5n-utyp-gqe3
17
vulnerability VCID-mj16-49bu-1fhs
18
vulnerability VCID-pgbx-psys-q7cd
19
vulnerability VCID-ppnh-m1gf-cyfb
20
vulnerability VCID-qwju-19hh-jqbm
21
vulnerability VCID-t22b-135p-yyeb
22
vulnerability VCID-t3xf-e2fb-63dk
23
vulnerability VCID-v4rx-u3kd-dubz
24
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.9.13
aliases CVE-2021-4017, GHSA-f77h-m9w2-vvg2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rsa3-88rf-z7bu
30
url VCID-t22b-135p-yyeb
vulnerability_id VCID-t22b-135p-yyeb
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0951
reference_id
reference_type
scores
0
value 0.00343
scoring_system epss
scoring_elements 0.57218
published_at 2026-06-07T12:55:00Z
1
value 0.00343
scoring_system epss
scoring_elements 0.57231
published_at 2026-06-06T12:55:00Z
2
value 0.00343
scoring_system epss
scoring_elements 0.57223
published_at 2026-06-05T12:55:00Z
3
value 0.00343
scoring_system epss
scoring_elements 0.57205
published_at 2026-06-08T12:55:00Z
4
value 0.00343
scoring_system epss
scoring_elements 0.57172
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0951
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/237ac6d43bf3728bf3587c486a23b4a48ea7acb3
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/237ac6d43bf3728bf3587c486a23b4a48ea7acb3
3
reference_url https://huntr.dev/bounties/b3a983a3-17f9-4aa8-92d7-8a0c92a93932
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/b3a983a3-17f9-4aa8-92d7-8a0c92a93932
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0951
reference_id CVE-2022-0951
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0951
5
reference_url https://github.com/advisories/GHSA-j6jg-w79c-7p8v
reference_id GHSA-j6jg-w79c-7p8v
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j6jg-w79c-7p8v
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0951, GHSA-j6jg-w79c-7p8v
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t22b-135p-yyeb
31
url VCID-t3xf-e2fb-63dk
vulnerability_id VCID-t3xf-e2fb-63dk
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0962
reference_id
reference_type
scores
0
value 0.00384
scoring_system epss
scoring_elements 0.5998
published_at 2026-06-08T12:55:00Z
1
value 0.00384
scoring_system epss
scoring_elements 0.59959
published_at 2026-06-04T12:55:00Z
2
value 0.00384
scoring_system epss
scoring_elements 0.60006
published_at 2026-06-05T12:55:00Z
3
value 0.00384
scoring_system epss
scoring_elements 0.60009
published_at 2026-06-06T12:55:00Z
4
value 0.00384
scoring_system epss
scoring_elements 0.59997
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0962
1
reference_url https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
2
reference_url https://huntr.dev/bounties/7ebe3e5f-2c86-44de-b83e-2ddb6bbda908
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/7ebe3e5f-2c86-44de-b83e-2ddb6bbda908
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0962
reference_id CVE-2022-0962
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0962
4
reference_url https://github.com/advisories/GHSA-pccm-j6vj-jwwf
reference_id GHSA-pccm-j6vj-jwwf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pccm-j6vj-jwwf
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0962, GHSA-pccm-j6vj-jwwf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t3xf-e2fb-63dk
32
url VCID-tfa3-qmfq-hkfj
vulnerability_id VCID-tfa3-qmfq-hkfj
summary
ShowDoc unrestricted file upload vulnerability
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution. This issue affects ShowDoc: before 2.8.7.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-0520
reference_id
reference_type
scores
0
value 0.0203
scoring_system epss
scoring_elements 0.84137
published_at 2026-06-05T12:55:00Z
1
value 0.0203
scoring_system epss
scoring_elements 0.8414
published_at 2026-06-06T12:55:00Z
2
value 0.02548
scoring_system epss
scoring_elements 0.85777
published_at 2026-06-07T12:55:00Z
3
value 0.02548
scoring_system epss
scoring_elements 0.85762
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-0520
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 9.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/pull/1059
reference_id
reference_type
scores
0
value 9.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-29T20:38:44Z/
url https://github.com/star7th/showdoc/pull/1059
3
reference_url https://github.com/vulhub/vulhub/tree/master/showdoc/CNVD-2020-26585
reference_id
reference_type
scores
0
value 9.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-29T20:38:44Z/
url https://github.com/vulhub/vulhub/tree/master/showdoc/CNVD-2020-26585
4
reference_url https://www.cnvd.org.cn/flaw/show/CNVD-2020-26585
reference_id
reference_type
scores
0
value 9.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-29T20:38:44Z/
url https://www.cnvd.org.cn/flaw/show/CNVD-2020-26585
5
reference_url https://www.vulncheck.com/advisories/showdoc-unauthenticated-file-upload-rce
reference_id
reference_type
scores
0
value 9.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-29T20:38:44Z/
url https://www.vulncheck.com/advisories/showdoc-unauthenticated-file-upload-rce
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-0520
reference_id CVE-2025-0520
reference_type
scores
0
value 9.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-0520
7
reference_url https://github.com/advisories/GHSA-6jmr-r7p6-f5wr
reference_id GHSA-6jmr-r7p6-f5wr
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6jmr-r7p6-f5wr
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.8.7
purl pkg:composer/showdoc/showdoc@2.8.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t7f-6es9-k3c8
1
vulnerability VCID-3j53-nrc9-n7as
2
vulnerability VCID-3wb2-9q5s-5kb4
3
vulnerability VCID-4kd3-qaha-3ybn
4
vulnerability VCID-6jnb-hve3-uqhn
5
vulnerability VCID-7aas-2br7-ubfb
6
vulnerability VCID-7fcp-yz8r-pbhf
7
vulnerability VCID-a3zn-fqvn-w3ff
8
vulnerability VCID-agx5-jjj7-gyfr
9
vulnerability VCID-av22-2r6d-kydb
10
vulnerability VCID-bnan-k8zm-eqah
11
vulnerability VCID-bpyz-tsky-t7dy
12
vulnerability VCID-br1f-rp5b-77ce
13
vulnerability VCID-chek-rsju-gqfd
14
vulnerability VCID-dghy-4cfc-7kc9
15
vulnerability VCID-dknr-fwjh-g7bw
16
vulnerability VCID-e6cf-bz5b-5fdv
17
vulnerability VCID-getm-5kfz-c3cj
18
vulnerability VCID-gsj9-k61j-1bbs
19
vulnerability VCID-gt4a-2hs9-a7dz
20
vulnerability VCID-h89u-59pk-2fgu
21
vulnerability VCID-hb5n-utyp-gqe3
22
vulnerability VCID-juxe-8cs4-cyfs
23
vulnerability VCID-mj16-49bu-1fhs
24
vulnerability VCID-nqnp-wv88-w7be
25
vulnerability VCID-pgbx-psys-q7cd
26
vulnerability VCID-ppnh-m1gf-cyfb
27
vulnerability VCID-qwju-19hh-jqbm
28
vulnerability VCID-rsa3-88rf-z7bu
29
vulnerability VCID-t22b-135p-yyeb
30
vulnerability VCID-t3xf-e2fb-63dk
31
vulnerability VCID-v4rx-u3kd-dubz
32
vulnerability VCID-wmj7-1w37-43dm
33
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.8.7
aliases CVE-2025-0520, GHSA-6jmr-r7p6-f5wr
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tfa3-qmfq-hkfj
33
url VCID-v4rx-u3kd-dubz
vulnerability_id VCID-v4rx-u3kd-dubz
summary Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0409
reference_id
reference_type
scores
0
value 0.00209
scoring_system epss
scoring_elements 0.4337
published_at 2026-06-06T12:55:00Z
1
value 0.00209
scoring_system epss
scoring_elements 0.43311
published_at 2026-06-08T12:55:00Z
2
value 0.00209
scoring_system epss
scoring_elements 0.43346
published_at 2026-06-07T12:55:00Z
3
value 0.00209
scoring_system epss
scoring_elements 0.43287
published_at 2026-06-04T12:55:00Z
4
value 0.00209
scoring_system epss
scoring_elements 0.4336
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0409
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/7383d7a3c1b0807b6f397ba7df415a0ce7ccc436
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/7383d7a3c1b0807b6f397ba7df415a0ce7ccc436
3
reference_url https://huntr.dev/bounties/c25bfad1-2611-4226-954f-009e50f966f7
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/c25bfad1-2611-4226-954f-009e50f966f7
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0409
reference_id CVE-2022-0409
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0409
5
reference_url https://github.com/advisories/GHSA-6x3j-x9rp-whxp
reference_id GHSA-6x3j-x9rp-whxp
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6x3j-x9rp-whxp
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.2
purl pkg:composer/showdoc/showdoc@2.10.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4kd3-qaha-3ybn
1
vulnerability VCID-7aas-2br7-ubfb
2
vulnerability VCID-7fcp-yz8r-pbhf
3
vulnerability VCID-a3zn-fqvn-w3ff
4
vulnerability VCID-agx5-jjj7-gyfr
5
vulnerability VCID-av22-2r6d-kydb
6
vulnerability VCID-chek-rsju-gqfd
7
vulnerability VCID-dghy-4cfc-7kc9
8
vulnerability VCID-dknr-fwjh-g7bw
9
vulnerability VCID-e6cf-bz5b-5fdv
10
vulnerability VCID-gsj9-k61j-1bbs
11
vulnerability VCID-gt4a-2hs9-a7dz
12
vulnerability VCID-h89u-59pk-2fgu
13
vulnerability VCID-mj16-49bu-1fhs
14
vulnerability VCID-ppnh-m1gf-cyfb
15
vulnerability VCID-qwju-19hh-jqbm
16
vulnerability VCID-t22b-135p-yyeb
17
vulnerability VCID-t3xf-e2fb-63dk
18
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.2
aliases CVE-2022-0409, GHSA-6x3j-x9rp-whxp
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v4rx-u3kd-dubz
34
url VCID-wmj7-1w37-43dm
vulnerability_id VCID-wmj7-1w37-43dm
summary showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3683
reference_id
reference_type
scores
0
value 0.00112
scoring_system epss
scoring_elements 0.29242
published_at 2026-06-06T12:55:00Z
1
value 0.00112
scoring_system epss
scoring_elements 0.29173
published_at 2026-06-08T12:55:00Z
2
value 0.00112
scoring_system epss
scoring_elements 0.29206
published_at 2026-06-07T12:55:00Z
3
value 0.00112
scoring_system epss
scoring_elements 0.29205
published_at 2026-06-04T12:55:00Z
4
value 0.00112
scoring_system epss
scoring_elements 0.29275
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3683
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/67093c879a6563aa6ee08003177777d1975e2351
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/67093c879a6563aa6ee08003177777d1975e2351
3
reference_url https://huntr.dev/bounties/063a339a-5d78-40d6-a96a-6716960e8134
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/063a339a-5d78-40d6-a96a-6716960e8134
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3683
reference_id CVE-2021-3683
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3683
5
reference_url https://github.com/advisories/GHSA-x5jp-9fmm-m9pf
reference_id GHSA-x5jp-9fmm-m9pf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x5jp-9fmm-m9pf
fixed_packages
aliases CVE-2021-3683, GHSA-x5jp-9fmm-m9pf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wmj7-1w37-43dm
35
url VCID-yr99-pat7-ekg5
vulnerability_id VCID-yr99-pat7-ekg5
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0950
reference_id
reference_type
scores
0
value 0.00281
scoring_system epss
scoring_elements 0.51797
published_at 2026-06-07T12:55:00Z
1
value 0.00281
scoring_system epss
scoring_elements 0.51819
published_at 2026-06-06T12:55:00Z
2
value 0.00281
scoring_system epss
scoring_elements 0.51809
published_at 2026-06-05T12:55:00Z
3
value 0.00281
scoring_system epss
scoring_elements 0.51766
published_at 2026-06-08T12:55:00Z
4
value 0.00281
scoring_system epss
scoring_elements 0.5175
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0950
1
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
2
reference_url https://github.com/star7th/showdoc/commit/237ac6d43bf3728bf3587c486a23b4a48ea7acb3
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/237ac6d43bf3728bf3587c486a23b4a48ea7acb3
3
reference_url https://huntr.dev/bounties/acc23996-bd57-448f-9eb4-05a8a046c2dc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/acc23996-bd57-448f-9eb4-05a8a046c2dc
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0950
reference_id CVE-2022-0950
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0950
5
reference_url https://github.com/advisories/GHSA-v94v-pxqp-5qgj
reference_id GHSA-v94v-pxqp-5qgj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v94v-pxqp-5qgj
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.10.4
purl pkg:composer/showdoc/showdoc@2.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gt4a-2hs9-a7dz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.10.4
aliases CVE-2022-0950, GHSA-v94v-pxqp-5qgj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yr99-pat7-ekg5
36
url VCID-ysy2-h2q2-4udy
vulnerability_id VCID-ysy2-h2q2-4udy
summary
Showdoc Unauthenticated Access
ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified `page_id`.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-19620
reference_id
reference_type
scores
0
value 0.00132
scoring_system epss
scoring_elements 0.32265
published_at 2026-06-04T12:55:00Z
1
value 0.00132
scoring_system epss
scoring_elements 0.32239
published_at 2026-06-08T12:55:00Z
2
value 0.00132
scoring_system epss
scoring_elements 0.32269
published_at 2026-06-07T12:55:00Z
3
value 0.00132
scoring_system epss
scoring_elements 0.32306
published_at 2026-06-06T12:55:00Z
4
value 0.00132
scoring_system epss
scoring_elements 0.32337
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-19620
1
reference_url https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/IncorrectAccessControl#0x02-modify
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/IncorrectAccessControl#0x02-modify
2
reference_url https://github.com/star7th/showdoc
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc
3
reference_url https://github.com/star7th/showdoc/commit/bcdb5e3519285bdf81e618b3c9b90d22bc49e13c
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commit/bcdb5e3519285bdf81e618b3c9b90d22bc49e13c
4
reference_url https://github.com/star7th/showdoc/commits/v2.4.2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/commits/v2.4.2
5
reference_url https://github.com/star7th/showdoc/issues/397
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/star7th/showdoc/issues/397
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-19620
reference_id CVE-2018-19620
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-19620
7
reference_url https://github.com/advisories/GHSA-pfrc-5hhq-6hvr
reference_id GHSA-pfrc-5hhq-6hvr
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pfrc-5hhq-6hvr
fixed_packages
0
url pkg:composer/showdoc/showdoc@2.4.2
purl pkg:composer/showdoc/showdoc@2.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1t7f-6es9-k3c8
1
vulnerability VCID-3j53-nrc9-n7as
2
vulnerability VCID-3wb2-9q5s-5kb4
3
vulnerability VCID-4kd3-qaha-3ybn
4
vulnerability VCID-6jnb-hve3-uqhn
5
vulnerability VCID-7aas-2br7-ubfb
6
vulnerability VCID-7fcp-yz8r-pbhf
7
vulnerability VCID-8bw3-usja-9yb8
8
vulnerability VCID-a3zn-fqvn-w3ff
9
vulnerability VCID-agx5-jjj7-gyfr
10
vulnerability VCID-av22-2r6d-kydb
11
vulnerability VCID-bnan-k8zm-eqah
12
vulnerability VCID-bpyz-tsky-t7dy
13
vulnerability VCID-br1f-rp5b-77ce
14
vulnerability VCID-cg8f-kwg3-3ufj
15
vulnerability VCID-chek-rsju-gqfd
16
vulnerability VCID-dghy-4cfc-7kc9
17
vulnerability VCID-dknr-fwjh-g7bw
18
vulnerability VCID-e6cf-bz5b-5fdv
19
vulnerability VCID-getm-5kfz-c3cj
20
vulnerability VCID-gsj9-k61j-1bbs
21
vulnerability VCID-gt4a-2hs9-a7dz
22
vulnerability VCID-h89u-59pk-2fgu
23
vulnerability VCID-hb5n-utyp-gqe3
24
vulnerability VCID-juxe-8cs4-cyfs
25
vulnerability VCID-mj16-49bu-1fhs
26
vulnerability VCID-nqnp-wv88-w7be
27
vulnerability VCID-pgbx-psys-q7cd
28
vulnerability VCID-ppnh-m1gf-cyfb
29
vulnerability VCID-qwju-19hh-jqbm
30
vulnerability VCID-rsa3-88rf-z7bu
31
vulnerability VCID-t22b-135p-yyeb
32
vulnerability VCID-t3xf-e2fb-63dk
33
vulnerability VCID-tfa3-qmfq-hkfj
34
vulnerability VCID-v4rx-u3kd-dubz
35
vulnerability VCID-wmj7-1w37-43dm
36
vulnerability VCID-yr99-pat7-ekg5
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@2.4.2
aliases CVE-2018-19620, GHSA-pfrc-5hhq-6hvr
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ysy2-h2q2-4udy
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/showdoc/showdoc@1.4.5