CVE-2022-0946

The CVE-2022-0946 entry concerns ShowDoc (star7th/showdoc) with a stored XSS via viva cshtm file uploads. Affected versions are prior to v2.10.4, where uploaded files with the .cshtm extension can execute scripts in a user’s browser, enabling potential session hijacking or data exposure. Red Hat/...

CVE-2022-0946 Stored XSS viva cshtm file upload in star7th/showdoc

Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0941

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0941 Stored XSS due to Unrestricted File Upload in star7th/showdoc

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0941 Stored XSS due to Unrestricted File Upload in star7th/showdoc

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0940

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0940 Stored XSS due to Unrestricted File Upload in star7th/showdoc

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0940

The CVE-2022-0940 entry concerns the open‑source tool ShowDoc. Affected software: ShowDoc versions prior to 2.10.4. Vulnerability: stored cross‑site scripting caused by an unrestricted file upload feature, allowing attacker‑supplied content to be stored and served in a way that can execute in a u...

CVE-2022-0938

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0938

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4...

Cross site scripting

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0938 Stored XSS via file upload in star7th/showdoc

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0938

ShowDoc (star7th/showdoc) is affected by CVE-2022-0938: a stored XSS via the file upload feature in versions prior to 2.10.4. The issue stems from insufficient filtering of .xxhtml file uploads, enabling an attacker to upload malicious files and execute scripts in a user’s browser. Public referen...

CVE-2022-0938 Stored XSS via file upload in star7th/showdoc

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4...

Stored XSS viva axd and cshtml file upload in star7th/showdoc

Description This is a bypass of the report: https://huntr.dev/bounties/3eb5a8f9-24e3-4eae-a212-070b2fbc237e/ & https://huntr.dev/bounties/6127739d-f4f2-44cd-ae3d-e3ccb7f0d7b5/. Here the upload functionality allows the malicious files with the extension .cshtml and .axd which leads to Stored XSS...

CVE-2022-0937

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0937

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0937

CVE-2022-0937 concerns the open-source tool ShowDoc. Multiple sources confirm a stored XSS vulnerability via file upload in ShowDoc versions prior to 2.10.4, due to insufficient detection of .shtml file extensions in the upload feature. Impact is observed as stored XSS that can execute in a user’...

CVE-2022-0937 Stored xss in showdoc through file upload in star7th/showdoc

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0937 Stored xss in showdoc through file upload in star7th/showdoc

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4...