Cross-site Scripting in ShowDoc
Moderate severity
GitHub Reviewed
Published
Mar 15, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Mar 14, 2022
Published to the GitHub Advisory Database
Mar 15, 2022
Reviewed
Mar 23, 2022
Last updated
Jan 27, 2023
ShowDoc is vulnerable to stored cross-site scripting due to unrestricted file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4.
References