Vulnerabilities

TI-2022-00863 CVE-2022-0964 · GHSA-xm3x-787m-p66r

Stored XSS viva .webmv file upload in star7th/showdoc

LOW 26

Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00838 Published 2022-03-15 Fixed in 2.10.4 CWE-79

TI-2022-00864 CVE-2022-0965 · GHSA-v8mp-hhjq-h4cj

LOW 26

Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00902 Published 2022-03-15 Fixed in 2.10.4 CWE-79

TI-2022-00866 CVE-2022-0967 · GHSA-3pg8-c473-w6rr

LOW 30

Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.03262 Published 2022-03-15 Fixed in 2.10.4 CWE-79

TI-2022-00841 CVE-2022-0942 · GHSA-9fcc-7g44-mxrj

LOW 26

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00752 Published 2022-03-15 Fixed in 2.10.4 CWE-79

TI-2022-00856 CVE-2022-0957 · GHSA-q73m-3q7r-fpf7

LOW 26

Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00766 Published 2022-03-15 Fixed in 2.10.4 CWE-79

TI-2022-00850 CVE-2022-0951 · GHSA-j6jg-w79c-7p8v

LOW 29

File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00884 Published 2022-03-15 Fixed in 2.10.4 CWE-434

TI-2022-00849 CVE-2022-0950 · GHSA-v94v-pxqp-5qgj

LOW 25

Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00634 Published 2022-03-15 Fixed in 2.10.4 CWE-434