Star7th

35 CVEs across 2 Star7th products. Browse Star7th vulnerabilities, severities, and proof-of-concept exploits.

Star7th products with known CVEs

Product	CVEs
Star7th/showdoc	34
Showdoc	1

Star7th CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2026-6982`	Medium	`6.3`	2026-04-25	A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Appl…
`CVE-2022-1034`	High	`7.2`	2022-03-22	There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.
`CVE-2022-0967`	Medium	`5.4`	2022-03-15	Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.
`CVE-2022-0966`	Medium	`5.4`	2022-03-15	Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.
`CVE-2022-0965`	Medium	`5.4`	2022-03-15	Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.
`CVE-2022-0964`	Medium	`5.4`	2022-03-15	Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4.
`CVE-2022-0942`	Medium	`5.4`	2022-03-15	Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.
`CVE-2022-0957`	Medium	`5.4`	2022-03-15	Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4.
`CVE-2022-0956`	Medium	`5.4`	2022-03-15	Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4.
`CVE-2022-0951`	Medium	`6.1`	2022-03-15	File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4.
`CVE-2022-0950`	Medium	`5.4`	2022-03-15	Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.
`CVE-2022-0945`	Medium	`5.4`	2022-03-15	Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.
`CVE-2022-0962`	Medium	`5.4`	2022-03-14	Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4.
`CVE-2022-0960`	Medium	`5.4`	2022-03-14	Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4.
`CVE-2022-0946`	Medium	`5.4`	2022-03-14	Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4.
`CVE-2022-0941`	Medium	`5.4`	2022-03-14	Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.
`CVE-2022-0940`	Medium	`5.4`	2022-03-14	Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.
`CVE-2022-0938`	Medium	`5.4`	2022-03-14	Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.
`CVE-2022-0937`	Medium	`5.4`	2022-03-14	Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.
`CVE-2022-0880`	Medium	`5.4`	2022-03-12	Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.
`CVE-2022-0409`	High	`7.8`	2022-02-19	Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.
`CVE-2022-0362`	Critical	`9.8`	2022-01-26	SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.
`CVE-2021-4172`	Medium	`5.4`	2022-01-22	Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.
`CVE-2022-0079`	Medium	`5.3`	2022-01-03	showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
`CVE-2021-4168`	High	`8.8`	2021-12-26	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
`CVE-2021-4000`	Medium	`6.1`	2021-12-03	showdoc is vulnerable to URL Redirection to Untrusted Site
`CVE-2021-4017`	High	`8.8`	2021-12-01	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
`CVE-2021-3993`	Medium	`6.5`	2021-12-01	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
`CVE-2021-3990`	Medium	`6.5`	2021-12-01	showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
`CVE-2021-3989`	Medium	`6.1`	2021-12-01	showdoc is vulnerable to URL Redirection to Untrusted Site
`CVE-2021-3776`	Medium	`5.4`	2021-11-13	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
`CVE-2021-3775`	Medium	`5.4`	2021-11-13	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
`CVE-2021-3683`	Medium	`6.5`	2021-11-13	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
`CVE-2021-3678`	Medium	`5.9`	2021-08-04	showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
`CVE-2021-3680`	Medium	`4.9`	2021-08-04	showdoc is vulnerable to Missing Cryptographic Step