CVE-2022-0940 MEDIUM

CVE-2022-0940: Stored XSS due to Unrestricted File Upload in star7th/showdoc

Vendor Star7Th
Product star7th/showdoc
Weakness CWE-79 · XSS
Published March 14, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

Key dates

02Disclosure timeline

March 14, 2022 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-10832 Posti Shipping <= 3.10.3 - Reflected Cross-Site Scripting CVE-2022-43871 IBM Financial Transaction Manager for SWIFT Services cross-site scripting CVE-2025-10117 SourceCodester Simple To-Do List System Add New Task fetch_tasks.php cross site scripting CVE-2026-24672 Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields CVE-2025-0475 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab