medium5.4
CVE-2022-0962
Cross-site Scripting in ShowDoc
Impact
ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via `.webma` file upload.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | showdoc/showdoc | < 2.10.4 | 2.10.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Showdoc | Showdoc | before 2.10.4 |