Star7th Showdoc vulnerabilities

• showdoc ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock Templates CVE-2026-120203 8.7 HighOctober 31, 2026
• star7th showdoc ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries CVE-2026-119661 2.3 LowOctober 30, 2026
• star7th showdoc star7th showdoc API Page Save Endpoint editormd.js cross site scripting CVE-2026-86644 5.1 MediumSeptember 8, 2026
• star7th showdoc star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection CVE-2026-6982 Fix available 5.3 MediumApril 25, 2026
• showdoc ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution CVE-2025-0520 Fix available 9.4 CriticalApril 29, 2025
• showdoc, star7th star7th/showdoc +1 more There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdoc CVE-2022-1034 Fix available 9.1 CriticalMarch 22, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS viva .webmv file upload in star7th/showdoc CVE-2022-0964 Fix available 8.0 HighMarch 15, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS viva .ofd file upload in star7th/showdoc CVE-2022-0965 Fix available 9.0 CriticalMarch 15, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS via File Upload in star7th/showdoc in star7th/showdoc CVE-2022-0966 Fix available 6.4 MediumMarch 15, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc CVE-2022-0967 Public exploitFix available 6.9 MediumMarch 15, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS due to Unrestricted File Upload in star7th/showdoc CVE-2022-0942 Fix available 9.4 CriticalMarch 15, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS via File Upload in star7th/showdoc CVE-2022-0957 Fix available 7.6 HighMarch 15, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS via File Upload in star7th/showdoc CVE-2022-0956 Fix available 7.1 HighMarch 15, 2022
• showdoc, star7th star7th/showdoc +1 more File Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc CVE-2022-0951 Fix available 8.2 HighMarch 15, 2022
• showdoc, star7th star7th/showdoc +1 more Unrestricted Upload of File with Dangerous Type in star7th/showdoc CVE-2022-0950 Fix available 6.5 MediumMarch 15, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc CVE-2022-0945 Fix available 9.0 CriticalMarch 15, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS viva .webma file upload in star7th/showdoc CVE-2022-0962 Fix available 9.0 CriticalMarch 14, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS viva .properties file upload in star7th/showdoc CVE-2022-0960 Fix available 9.0 CriticalMarch 14, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS viva cshtm file upload in star7th/showdoc CVE-2022-0946 Fix available 9.0 CriticalMarch 14, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS due to Unrestricted File Upload in star7th/showdoc CVE-2022-0941 Fix available 7.3 HighMarch 14, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS due to Unrestricted File Upload in star7th/showdoc CVE-2022-0940 Fix available 6.3 MediumMarch 14, 2022
• showdoc, star7th star7th/showdoc +1 more Stored XSS via file upload in star7th/showdoc CVE-2022-0938 Fix available 7.1 HighMarch 14, 2022
• showdoc, star7th star7th/showdoc +1 more Stored xss in showdoc through file upload in star7th/showdoc CVE-2022-0937 Fix available 6.3 MediumMarch 14, 2022
• showdoc, star7th star7th/showdoc +1 more Cross-site Scripting (XSS) - Stored in star7th/showdoc CVE-2022-0880 Fix available 7.6 HighMarch 12, 2022
• showdoc, star7th star7th/showdoc +1 more Unrestricted Upload of File with Dangerous Type in star7th/showdoc CVE-2022-0409 Fix available 7.2 HighFebruary 19, 2022
• showdoc, star7th star7th/showdoc +1 more SQL Injection in star7th/showdoc CVE-2022-0362 Fix available 6.7 MediumJanuary 26, 2022
• showdoc, star7th star7th/showdoc +1 more Cross-site Scripting (XSS) - Stored in star7th/showdoc CVE-2021-4172 Fix available 6.5 MediumJanuary 22, 2022
• showdoc, star7th star7th/showdoc +1 more Generation of Error Message Containing Sensitive Information in star7th/showdoc CVE-2022-0079 Fix available 5.3 MediumJanuary 3, 2022
• showdoc, star7th star7th/showdoc +1 more Cross-Site Request Forgery (CSRF) in star7th/showdoc CVE-2021-4168 Fix available 6.3 MediumDecember 26, 2021
• showdoc, star7th star7th/showdoc +1 more Open Redirect in star7th/showdoc CVE-2021-4000 6.5 MediumDecember 3, 2021
• showdoc, star7th star7th/showdoc +1 more Open Redirect in star7th/showdoc CVE-2021-3989 Fix available 6.5 MediumDecember 1, 2021
• showdoc, star7th star7th/showdoc +1 more Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc CVE-2021-3990 Fix available 6.5 MediumDecember 1, 2021
• showdoc, star7th star7th/showdoc +1 more Cross-Site Request Forgery (CSRF) in star7th/showdoc CVE-2021-3993 Fix available 4.3 MediumDecember 1, 2021
• showdoc, star7th star7th/showdoc +1 more Cross-Site Request Forgery (CSRF) in star7th/showdoc CVE-2021-4017 Fix available 7.3 HighDecember 1, 2021
• showdoc, star7th star7th/showdoc +1 more Cross-Site Request Forgery (CSRF) in star7th/showdoc CVE-2021-3683 5.4 MediumNovember 13, 2021
• showdoc, star7th star7th/showdoc +1 more Cross-Site Request Forgery (CSRF) in star7th/showdoc CVE-2021-3775 4.3 MediumNovember 13, 2021
• showdoc, star7th star7th/showdoc +1 more Cross-Site Request Forgery (CSRF) in star7th/showdoc CVE-2021-3776 Fix available 4.3 MediumNovember 13, 2021
• showdoc, star7th star7th/showdoc +1 more Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc CVE-2021-3678 Fix available 7.5 HighAugust 4, 2021
• showdoc, star7th star7th/showdoc +1 more Missing Cryptographic Step in star7th/showdoc CVE-2021-3680 5.3 MediumAugust 4, 2021