CVE-2022-0967

Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc

CVSS 6.9 MEDIUMEPSS 3.3%CWE-79

Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected products

star7th · star7th/showdoc

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/167198/Showdoc-2.10.3-Cross-Site-Scripting.htmlunverified exploitdbwww.exploit-db.com/exploits/50941unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/167198/Showdoc-2.10.3-Cross-Site-Scripting.html https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8 https://huntr.dev/bounties/9dea3c98-7609-480d-902d-149067bd1e2a