Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

star7th/showdoc — Vulnerabilities & Security Advisories 34

All 34 CVE vulnerabilities found in star7th/showdoc, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the open-source documentation system ShowDoc, maintained by star7th. It collects various weakness types associated with this specific product, covering the full historical record of its published advisories. Readers can use this view to track the vendor's security disclosures, understand recurring weakness classes, and review the product's complete vulnerability history. The dataset includes entries spanning from the earliest recorded issue through the most recent updates, providing a consolidated timeline of identified flaws. By consolidating these records, the page facilitates a clear overview of the security posture of this widely used documentation tool.

Vendor: star7th

CVE ID Title CVSS Severity Published
CVE-2022-1034 There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdoc CWE-434 7.2 - 2022-03-22
CVE-2022-0964 Stored XSS viva .webmv file upload in star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0965 Stored XSS viva .ofd file upload in star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0966 Stored XSS via File Upload in star7th/showdoc in star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0967 Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0942 Stored XSS due to Unrestricted File Upload in star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0957 Stored XSS via File Upload in star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0956 Stored XSS via File Upload in star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0951 File Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc CWE-434 5.4 - 2022-03-15
CVE-2022-0950 Unrestricted Upload of File with Dangerous Type in star7th/showdoc CWE-434 8.7 - 2022-03-15
CVE-2022-0945 Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc CWE-434 5.4 - 2022-03-15
CVE-2022-0962 Stored XSS viva .webma file upload in star7th/showdoc CWE-434 5.4 - 2022-03-14
CVE-2022-0960 Stored XSS viva .properties file upload in star7th/showdoc CWE-434 5.4 - 2022-03-14
CVE-2022-0946 Stored XSS viva cshtm file upload in star7th/showdoc CWE-79 5.4 - 2022-03-14
CVE-2022-0941 Stored XSS due to Unrestricted File Upload in star7th/showdoc CWE-79 5.4 - 2022-03-14
CVE-2022-0940 Stored XSS due to Unrestricted File Upload in star7th/showdoc CWE-79 5.4 - 2022-03-14
CVE-2022-0938 Stored XSS via file upload in star7th/showdoc CWE-79 5.4 - 2022-03-14
CVE-2022-0937 Stored xss in showdoc through file upload in star7th/showdoc CWE-79 5.4 - 2022-03-14
CVE-2022-0880 Cross-site Scripting (XSS) - Stored in star7th/showdoc CWE-79 5.4 - 2022-03-12
CVE-2022-0409 Unrestricted Upload of File with Dangerous Type in star7th/showdoc CWE-434 8.0 - 2022-02-19
CVE-2022-0362 SQL Injection in star7th/showdoc CWE-89 8.8 - 2022-01-26
CVE-2021-4172 Cross-site Scripting (XSS) - Stored in star7th/showdoc CWE-79 5.4 - 2022-01-22
CVE-2022-0079 Generation of Error Message Containing Sensitive Information in star7th/showdoc CWE-209 5.3 - 2022-01-03
CVE-2021-4168 Cross-Site Request Forgery (CSRF) in star7th/showdoc CWE-352 6.5 - 2021-12-26
CVE-2021-4000 Open Redirect in star7th/showdoc CWE-601 6.1 - 2021-12-03
CVE-2021-3989 Open Redirect in star7th/showdoc CWE-601 6.1 - 2021-12-01
CVE-2021-3990 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc CWE-338 5.3 - 2021-12-01
CVE-2021-3993 Cross-Site Request Forgery (CSRF) in star7th/showdoc CWE-352 6.5 - 2021-12-01
CVE-2021-4017 Cross-Site Request Forgery (CSRF) in star7th/showdoc CWE-352 6.5 - 2021-12-01
CVE-2021-3683 Cross-Site Request Forgery (CSRF) in star7th/showdoc CWE-352 6.5 - 2021-11-13

All 34 known CVE vulnerabilities affecting star7th/showdoc with full Chinese analysis, references, and POCs where available.