medium6.1
CVE-2018-19433
ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $cur_lang value.
Impact
ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $cur_lang value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Showdoc | Showdoc | Version 2.4.1 |