CVE-2018-19433

2018-11-2205:29:01

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.3%

JSON

ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $cur_lang value.

CPENameOperatorVersion
showdoceq2.2.1
showdoceq1.6.0
showdoceq2.1.5
showdoceq2.0.7
showdoceq1.4.7
showdoceq1.3.6
showdoceq1.4.1
showdoceq1.3.2
showdoceq1.0.5
showdoceq1.8.0

Name	Operator	Version
showdoc	eq	2.2.1
showdoc	eq	1.6.0
showdoc	eq	2.1.5
showdoc	eq	2.0.7
showdoc	eq	1.4.7
showdoc	eq	1.3.6
showdoc	eq	1.4.1
showdoc	eq	1.3.2
showdoc	eq	1.0.5
showdoc	eq	1.8.0

Rows per page:

1-10 of 781

References

github.com/star7th/showdoc/issues/392