medium6.1
CVE-2022-0951
File Upload Restriction Bypass leading to Cross-site Scripting in ShowDoc
Impact
ShowDoc prior to 2.10.4 is vulnerable to a file upload restriction bypass leading to stored cross-site scripting.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | showdoc/showdoc | < 2.10.4 | 2.10.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Showdoc | Showdoc | through 2.10.3 |