CVE-2022-0938

2022-03-1408:15:07

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.

CPENameOperatorVersion
showdoceq2.2.1
showdoceq2.1.1
showdoceq2.9.5
showdoceq2.3.1
showdoceq2.8.14
showdoceq2.0.2
showdoceq1.2.0
showdoceq1.8.0
showdoceq2.4.8
showdoceq1.4.0

Name	Operator	Version
showdoc	eq	2.2.1
showdoc	eq	2.1.1
showdoc	eq	2.9.5
showdoc	eq	2.3.1
showdoc	eq	2.8.14
showdoc	eq	2.0.2
showdoc	eq	1.2.0
showdoc	eq	1.8.0
showdoc	eq	2.4.8
showdoc	eq	1.4.0

Rows per page:

1-10 of 1401

References

github.com/star7th/showdoc/commit/830c89a4c2c5fd0dd491422bf8e97b4eb5713f55

huntr.dev/bounties/3eb5a8f9-24e3-4eae-a212-070b2fbc237e