| CVE-2026-6982 | MEDIO6.3 | A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a manipulation of the argument pages can lead to sql injection | 25/04/2026 |
| CVE-2025-0520 | CRÍTICO9.4 | An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7. | 29/04/2025 |
| CVE-2022-1034 | ALTO7.2 | There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4. | 22/03/2022 |
| CVE-2022-0967 | MEDIO5.4 | Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4. | 15/03/2022 |
| CVE-2022-0966 | MEDIO5.4 | Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10. | 15/03/2022 |
| CVE-2022-0965 | MEDIO5.4 | Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4. | 15/03/2022 |
| CVE-2022-0964 | MEDIO5.4 | Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4. | 15/03/2022 |
| CVE-2022-0942 | MEDIO5.4 | Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4. | 15/03/2022 |
| CVE-2022-0957 | MEDIO5.4 | Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4. | 15/03/2022 |
| CVE-2022-0956 | MEDIO5.4 | Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4. | 15/03/2022 |
| CVE-2022-0951 | MEDIO6.1 | File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4. | 15/03/2022 |
| CVE-2022-0950 | MEDIO5.4 | Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4. | 15/03/2022 |
| CVE-2022-0945 | MEDIO5.4 | Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4. | 15/03/2022 |
| CVE-2022-0962 | MEDIO5.4 | Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4. | 14/03/2022 |
| CVE-2022-0960 | MEDIO5.4 | Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4. | 14/03/2022 |
| CVE-2022-0946 | MEDIO5.4 | Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4. | 14/03/2022 |
| CVE-2022-0941 | MEDIO5.4 | Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4. | 14/03/2022 |
| CVE-2022-0940 | MEDIO5.4 | Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4. | 14/03/2022 |
| CVE-2022-0938 | MEDIO5.4 | Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4. | 14/03/2022 |
| CVE-2022-0937 | MEDIO5.4 | Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4. | 14/03/2022 |