medium5.4
CVE-2022-0940
Cross-site Scripting in ShowDoc
Impact
ShowDoc is vulnerable to stored cross-site scripting due to unrestricted file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | showdoc/showdoc | <= 2.10.3 | 2.10.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Showdoc | Showdoc | through 2.10.3 |