CVE-2022-0941 Stored XSS due to Unrestricted File Upload in star7th/showdoc

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0940

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0940 Stored XSS due to Unrestricted File Upload in star7th/showdoc

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0940

The CVE-2022-0940 entry concerns the open‑source tool ShowDoc. Affected software: ShowDoc versions prior to 2.10.4. Vulnerability: stored cross‑site scripting caused by an unrestricted file upload feature, allowing attacker‑supplied content to be stored and served in a way that can execute in a u...

CVE-2022-0938

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0938

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4...

Cross site scripting

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0938

ShowDoc (star7th/showdoc) is affected by CVE-2022-0938: a stored XSS via the file upload feature in versions prior to 2.10.4. The issue stems from insufficient filtering of .xxhtml file uploads, enabling an attacker to upload malicious files and execute scripts in a user’s browser. Public referen...

CVE-2022-0938 Stored XSS via file upload in star7th/showdoc

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0938 Stored XSS via file upload in star7th/showdoc

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4...

Stored XSS viva axd and cshtml file upload in star7th/showdoc

Description This is a bypass of the report: https://huntr.dev/bounties/3eb5a8f9-24e3-4eae-a212-070b2fbc237e/ & https://huntr.dev/bounties/6127739d-f4f2-44cd-ae3d-e3ccb7f0d7b5/. Here the upload functionality allows the malicious files with the extension .cshtml and .axd which leads to Stored XSS...

CVE-2022-0937

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0937

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0937

CVE-2022-0937 concerns the open-source tool ShowDoc. Multiple sources confirm a stored XSS vulnerability via file upload in ShowDoc versions prior to 2.10.4, due to insufficient detection of .shtml file extensions in the upload feature. Impact is observed as stored XSS that can execute in a user’...

CVE-2022-0937 Stored xss in showdoc through file upload in star7th/showdoc

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0937 Stored xss in showdoc through file upload in star7th/showdoc

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4...

showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .properties file extensions in the application's file upload feature. An attacker could exploit this...

CVE-2022-0938: Improper Neutralization of Input During Web Page Generation

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4...

showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .xxhtml file extensions in the application's file upload feature. An attacker could exploit this...

showdoc 跨站脚本漏洞

showdoc is an open source tool ideal for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .xsl file extensions in the application's file upload feature. An attacker could exploit this...