medium5.4
CVE-2022-0942
Cross-site Scripting in ShowDoc
Impact
ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via uploading files with files in `.xsd`, `.asa`, and `.aspx` formats.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | showdoc/showdoc | < 2.10.4 | 2.10.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Showdoc | Showdoc | through 2.10.3 |