<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: showdoc</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-1034: There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc p</title><link>https://patchthecve.com/cve/CVE-2022-1034.html</link><guid>https://patchthecve.com/cve/CVE-2022-1034.html</guid><pubDate>Wed, 17 Jun 2026 04:21:40 +0000</pubDate><description>HIGH 7.2: There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.</description></item><item><title>CVE-2022-0967: Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to</title><link>https://patchthecve.com/cve/CVE-2022-0967.html</link><guid>https://patchthecve.com/cve/CVE-2022-0967.html</guid><pubDate>Wed, 17 Jun 2026 04:21:34 +0000</pubDate><description>MEDIUM 5.4: Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.</description></item><item><title>CVE-2022-0966: Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.</title><link>https://patchthecve.com/cve/CVE-2022-0966.html</link><guid>https://patchthecve.com/cve/CVE-2022-0966.html</guid><pubDate>Wed, 17 Jun 2026 04:21:33 +0000</pubDate><description>MEDIUM 5.4: Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.</description></item><item><title>CVE-2022-0965: Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0965.html</link><guid>https://patchthecve.com/cve/CVE-2022-0965.html</guid><pubDate>Wed, 17 Jun 2026 04:21:33 +0000</pubDate><description>MEDIUM 5.4: Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.</description></item><item><title>CVE-2022-0964: Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0964.html</link><guid>https://patchthecve.com/cve/CVE-2022-0964.html</guid><pubDate>Wed, 17 Jun 2026 04:21:33 +0000</pubDate><description>MEDIUM 5.4: Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4.</description></item><item><title>CVE-2022-0942: Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0942.html</link><guid>https://patchthecve.com/cve/CVE-2022-0942.html</guid><pubDate>Wed, 17 Jun 2026 04:21:31 +0000</pubDate><description>MEDIUM 5.4: Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.</description></item><item><title>CVE-2022-0957: Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0957.html</link><guid>https://patchthecve.com/cve/CVE-2022-0957.html</guid><pubDate>Wed, 17 Jun 2026 04:21:32 +0000</pubDate><description>MEDIUM 5.4: Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4.</description></item><item><title>CVE-2022-0956: Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0956.html</link><guid>https://patchthecve.com/cve/CVE-2022-0956.html</guid><pubDate>Wed, 17 Jun 2026 04:21:32 +0000</pubDate><description>MEDIUM 5.4: Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4.</description></item><item><title>CVE-2022-0951: File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior </title><link>https://patchthecve.com/cve/CVE-2022-0951.html</link><guid>https://patchthecve.com/cve/CVE-2022-0951.html</guid><pubDate>Wed, 17 Jun 2026 04:21:32 +0000</pubDate><description>MEDIUM 6.1: File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4.</description></item><item><title>CVE-2022-0950: Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0950.html</link><guid>https://patchthecve.com/cve/CVE-2022-0950.html</guid><pubDate>Wed, 17 Jun 2026 04:21:32 +0000</pubDate><description>MEDIUM 5.4: Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.</description></item><item><title>CVE-2022-0945: Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2</title><link>https://patchthecve.com/cve/CVE-2022-0945.html</link><guid>https://patchthecve.com/cve/CVE-2022-0945.html</guid><pubDate>Wed, 17 Jun 2026 04:21:31 +0000</pubDate><description>MEDIUM 5.4: Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.</description></item><item><title>CVE-2022-0962: Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0962.html</link><guid>https://patchthecve.com/cve/CVE-2022-0962.html</guid><pubDate>Wed, 17 Jun 2026 04:21:33 +0000</pubDate><description>MEDIUM 5.4: Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4.</description></item><item><title>CVE-2022-0960: Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0960.html</link><guid>https://patchthecve.com/cve/CVE-2022-0960.html</guid><pubDate>Wed, 17 Jun 2026 04:21:33 +0000</pubDate><description>MEDIUM 5.4: Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4.</description></item><item><title>CVE-2022-0946: Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0946.html</link><guid>https://patchthecve.com/cve/CVE-2022-0946.html</guid><pubDate>Wed, 17 Jun 2026 04:21:31 +0000</pubDate><description>MEDIUM 5.4: Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4.</description></item><item><title>CVE-2022-0941: Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0941.html</link><guid>https://patchthecve.com/cve/CVE-2022-0941.html</guid><pubDate>Wed, 17 Jun 2026 04:21:31 +0000</pubDate><description>MEDIUM 5.4: Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.</description></item><item><title>CVE-2022-0940: Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0940.html</link><guid>https://patchthecve.com/cve/CVE-2022-0940.html</guid><pubDate>Wed, 17 Jun 2026 04:21:31 +0000</pubDate><description>MEDIUM 5.4: Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.</description></item><item><title>CVE-2022-0938: Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0938.html</link><guid>https://patchthecve.com/cve/CVE-2022-0938.html</guid><pubDate>Wed, 17 Jun 2026 04:21:30 +0000</pubDate><description>MEDIUM 5.4: Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.</description></item><item><title>CVE-2022-0937: Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.</title><link>https://patchthecve.com/cve/CVE-2022-0937.html</link><guid>https://patchthecve.com/cve/CVE-2022-0937.html</guid><pubDate>Wed, 17 Jun 2026 04:21:30 +0000</pubDate><description>MEDIUM 5.4: Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.</description></item><item><title>CVE-2022-0880: Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.</title><link>https://patchthecve.com/cve/CVE-2022-0880.html</link><guid>https://patchthecve.com/cve/CVE-2022-0880.html</guid><pubDate>Wed, 17 Jun 2026 04:21:25 +0000</pubDate><description>MEDIUM 5.4: Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.</description></item><item><title>CVE-2022-0409: Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.</title><link>https://patchthecve.com/cve/CVE-2022-0409.html</link><guid>https://patchthecve.com/cve/CVE-2022-0409.html</guid><pubDate>Wed, 17 Jun 2026 04:20:33 +0000</pubDate><description>HIGH 7.8: Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.</description></item><item><title>CVE-2022-0362: SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.</title><link>https://patchthecve.com/cve/CVE-2022-0362.html</link><guid>https://patchthecve.com/cve/CVE-2022-0362.html</guid><pubDate>Wed, 17 Jun 2026 04:20:27 +0000</pubDate><description>CRITICAL 9.8: SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.</description></item><item><title>CVE-2021-4172: Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.</title><link>https://patchthecve.com/cve/CVE-2021-4172.html</link><guid>https://patchthecve.com/cve/CVE-2021-4172.html</guid><pubDate>Wed, 17 Jun 2026 04:19:09 +0000</pubDate><description>MEDIUM 5.4: Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.</description></item><item><title>CVE-2022-0079: showdoc is vulnerable to Generation of Error Message Containing Sensitive Information</title><link>https://patchthecve.com/cve/CVE-2022-0079.html</link><guid>https://patchthecve.com/cve/CVE-2022-0079.html</guid><pubDate>Wed, 17 Jun 2026 04:19:56 +0000</pubDate><description>MEDIUM 5.3: showdoc is vulnerable to Generation of Error Message Containing Sensitive Information</description></item><item><title>CVE-2021-4168: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)</title><link>https://patchthecve.com/cve/CVE-2021-4168.html</link><guid>https://patchthecve.com/cve/CVE-2021-4168.html</guid><pubDate>Wed, 17 Jun 2026 04:19:08 +0000</pubDate><description>HIGH 8.8: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)</description></item><item><title>CVE-2021-4000: showdoc is vulnerable to URL Redirection to Untrusted Site</title><link>https://patchthecve.com/cve/CVE-2021-4000.html</link><guid>https://patchthecve.com/cve/CVE-2021-4000.html</guid><pubDate>Wed, 17 Jun 2026 04:18:52 +0000</pubDate><description>MEDIUM 6.1: showdoc is vulnerable to URL Redirection to Untrusted Site</description></item><item><title>CVE-2021-4017: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)</title><link>https://patchthecve.com/cve/CVE-2021-4017.html</link><guid>https://patchthecve.com/cve/CVE-2021-4017.html</guid><pubDate>Wed, 17 Jun 2026 04:18:54 +0000</pubDate><description>HIGH 8.8: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)</description></item><item><title>CVE-2021-3993: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)</title><link>https://patchthecve.com/cve/CVE-2021-3993.html</link><guid>https://patchthecve.com/cve/CVE-2021-3993.html</guid><pubDate>Wed, 17 Jun 2026 04:06:21 +0000</pubDate><description>MEDIUM 6.5: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)</description></item><item><title>CVE-2021-3990: showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)</title><link>https://patchthecve.com/cve/CVE-2021-3990.html</link><guid>https://patchthecve.com/cve/CVE-2021-3990.html</guid><pubDate>Wed, 17 Jun 2026 04:06:21 +0000</pubDate><description>MEDIUM 6.5: showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)</description></item><item><title>CVE-2021-3989: showdoc is vulnerable to URL Redirection to Untrusted Site</title><link>https://patchthecve.com/cve/CVE-2021-3989.html</link><guid>https://patchthecve.com/cve/CVE-2021-3989.html</guid><pubDate>Wed, 17 Jun 2026 04:06:20 +0000</pubDate><description>MEDIUM 6.1: showdoc is vulnerable to URL Redirection to Untrusted Site</description></item><item><title>CVE-2021-3776: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)</title><link>https://patchthecve.com/cve/CVE-2021-3776.html</link><guid>https://patchthecve.com/cve/CVE-2021-3776.html</guid><pubDate>Wed, 17 Jun 2026 04:05:44 +0000</pubDate><description>MEDIUM 5.4: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)</description></item><item><title>CVE-2021-3775: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)</title><link>https://patchthecve.com/cve/CVE-2021-3775.html</link><guid>https://patchthecve.com/cve/CVE-2021-3775.html</guid><pubDate>Wed, 17 Jun 2026 04:05:44 +0000</pubDate><description>MEDIUM 5.4: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)</description></item><item><title>CVE-2021-3683: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)</title><link>https://patchthecve.com/cve/CVE-2021-3683.html</link><guid>https://patchthecve.com/cve/CVE-2021-3683.html</guid><pubDate>Wed, 17 Jun 2026 04:05:33 +0000</pubDate><description>MEDIUM 6.5: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)</description></item><item><title>CVE-2021-41745: ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server per</title><link>https://patchthecve.com/cve/CVE-2021-41745.html</link><guid>https://patchthecve.com/cve/CVE-2021-41745.html</guid><pubDate>Wed, 17 Jun 2026 04:08:51 +0000</pubDate><description>CRITICAL 9.8: ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions.</description></item><item><title>CVE-2021-36440: Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the &#x27;file_url</title><link>https://patchthecve.com/cve/CVE-2021-36440.html</link><guid>https://patchthecve.com/cve/CVE-2021-36440.html</guid><pubDate>Wed, 17 Jun 2026 03:58:51 +0000</pubDate><description>CRITICAL 9.8: Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the &#x27;file_url&#x27; parameter in the component AdminUpdateController.class.php&#x27;.</description></item><item><title>CVE-2021-3678: showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)</title><link>https://patchthecve.com/cve/CVE-2021-3678.html</link><guid>https://patchthecve.com/cve/CVE-2021-3678.html</guid><pubDate>Wed, 17 Jun 2026 04:05:33 +0000</pubDate><description>MEDIUM 5.9: showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)</description></item><item><title>CVE-2021-3680: showdoc is vulnerable to Missing Cryptographic Step</title><link>https://patchthecve.com/cve/CVE-2021-3680.html</link><guid>https://patchthecve.com/cve/CVE-2021-3680.html</guid><pubDate>Wed, 17 Jun 2026 04:05:33 +0000</pubDate><description>MEDIUM 4.9: showdoc is vulnerable to Missing Cryptographic Step</description></item></channel></rss>