~ / search / GHSA-7x22-pmw5-66mq

GHSA-7x22-pmw5-66mq

Cross-site Scripting in showdoc

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-4172

Packages

EcosystemPackageAffectedFixed in
Packagist showdoc/showdoc < 2.10.2 2.10.2

Details

As written in the advisory (Markdown source, shown as plain text).

Stored XSS via upload attachment with format .svg in File Library.

References

External links from the advisory. They lead to third-party sites.