Lucene search

K
osvGoogleOSV:GHSA-MG5H-9RHQ-4CQX
HistoryMar 15, 2022 - 12:01 a.m.

Cross-site Scripting in ShowDoc

2022-03-1500:01:02
Google
osv.dev
8
showdoc
cross-site scripting
stored
file upload
versions 2.10.3
patch
anticipated
version 2.10.4
security vulnerability

EPSS

0.001

Percentile

21.4%

ShowDoc is vulnerable to stored cross-site scripting through file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4.

EPSS

0.001

Percentile

21.4%

Related for OSV:GHSA-MG5H-9RHQ-4CQX