showdoc 跨站脚本漏洞

showdoc is an open source tool ideal for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .xsl file extensions in the application's file upload feature. An attacker could exploit this...

CVE-2022-0940: Improper Neutralization of Input During Web Page Generation

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0960: Unrestricted Upload of File with Dangerous Type

Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4...

showdoc 跨站脚本漏洞

showdoc is open source and a great tool for IT teams to share documents online. showdoc has a security vulnerability and no details of the vulnerability are currently available...

showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 are vulnerable to file uploads, which stem from the lack of effective detection of .shtml file extensions in the application's file upload feature. An attacker could use this vulnerability to...

CVE-2022-0962: Unrestricted Upload of File with Dangerous Type

Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0937: Improper Neutralization of Input During Web Page Generation

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0941: Improper Neutralization of Input During Web Page Generation

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0946: Improper Neutralization of Input During Web Page Generation

Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4...

showdoc 跨站脚本漏洞

showdoc is open source and a great tool for IT teams to share documents online. showdoc has a security vulnerability and no details of the vulnerability are currently available...

Cross-site Scripting in ShowDoc

ShowDoc version 2.10.3 and prior is vulnerable to stored cross-site scripting. A patch is available and anticipated to be part of version 2.10.4...

GHSA-GQ77-3R6X-383W Cross-site Scripting in ShowDoc

ShowDoc version 2.10.3 and prior is vulnerable to stored cross-site scripting. A patch is available and anticipated to be part of version 2.10.4...

CVE-2022-0880

Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...

CVE-2022-0880 Cross-site Scripting (XSS) - Stored in star7th/showdoc

Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...

CVE-2022-0880

CVE-2022-0880 affects ShowDoc (star7th/showdoc) up to version 2.10.2, with stored XSS via attachments in the File Library (notably XML uploads) as reported by multiple sources. The vulnerability arises from stored XSS in the web interface when handling uploaded attachments, leading to script exec...

Stored xss in showdoc through file upload

Description Hi. This is a bypass to the report in https://huntr.dev/bounties/df347aa9-ed9b-4f75-af99-c83b8aad3bcf/ . It fails to check for files with the extension .shtml which leads to stored xss Proof of Concept // poc.shtml adsasdadsdsa alert1 Impact Stored Xss...

showdoc 跨站脚本漏洞

showdoc is open source a great tool for IT teams to share documents online. A security vulnerability exists in showdoc before 2.10.2. The vulnerability allowed .xml to store cross-site scripting attack payloads via uploaded attachments in the format found in the document library...

CVE-2022-0880: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...

showdoc code issue vulnerability

showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a code issue vulnerability that stems from unrestricted uploading of files with dangerous types. No details of the vulnerability are currently available...