Lucene search

K
osvGoogleOSV:GHSA-82J4-VR25-X394
HistoryMar 15, 2022 - 12:01 a.m.

Cross-site Scripting in ShowDoc

2022-03-1500:01:01
Google
osv.dev
7
showdoc
vulnerability
cross-site scripting
stored
patch
2.10.3
2.10.4

EPSS

0.001

Percentile

21.4%

ShowDoc is vulnerable to stored cross-site scripting due to unrestricted file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4.

EPSS

0.001

Percentile

21.4%

Related for OSV:GHSA-82J4-VR25-X394