medium5.4
CVE-2022-0945
Stored Cross-site Scripting in ShowDoc
Impact
ShowDoc prior to version 2.10.4 is vulnerable to stored cross-site scripting viva `axd` and `cshtml` file upload.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | showdoc/showdoc | < 2.10.4 | 2.10.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Showdoc | Showdoc | through 2.10.3 |