CVE-2022-0945

2022-03-1504:15:08

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.

CPENameOperatorVersion
showdoceq2.2.1
showdoceq2.1.1
showdoceq2.9.5
showdoceq2.3.1
showdoceq2.8.14
showdoceq2.0.2
showdoceq1.2.0
showdoceq1.8.0
showdoceq2.4.8
showdoceq1.4.0

Name	Operator	Version
showdoc	eq	2.2.1
showdoc	eq	2.1.1
showdoc	eq	2.9.5
showdoc	eq	2.3.1
showdoc	eq	2.8.14
showdoc	eq	2.0.2
showdoc	eq	1.2.0
showdoc	eq	1.8.0
showdoc	eq	2.4.8
showdoc	eq	1.4.0

Rows per page:

1-10 of 1401

References

github.com/star7th/showdoc/commit/ba45d19e1d77a7eea866dab30eff5da552694891

huntr.dev/bounties/8702e2bf-4af2-4391-b651-c8c89e7d089e