CVE-2026-120203

The software ShowDoc versions 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature . Authenticated users can execute shell commands by storing a template via MockController::add using escaped parentheses, which the mockjs engine evaluates using eval(). The command is th...