| Package | Affected versions | Patched versions |
|---|---|---|
| showdoc/showdoc | < 2.10.4 | 2.10.4 |
| showdoc | ≤ 2.10.3 |
The upload feature of ShowDoc prior to version 2.10.4 allows files with the extension .*html, which leads to stored cross-site scripting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free