GHSA-3pg8-c473-w6rr
Stored Cross-site Scripting in showdoc
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | showdoc/showdoc | < 2.10.4 | 2.10.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
ShowDoc is a tool for an IT team to share documents online. showdoc contains a stored cross-site scripting vulnerability in the File Library page when uploading a file in .ofd format in versions prior to 2.10.4. At this time, there is no known workaround. Users should update to version 2.10.4.
References
External links from the advisory. They lead to third-party sites.