CVE-2022-0945

Name of the Vulnerable Software and Affected Versions ShowDoc versions prior to 2.10.4

Description The issue concerns a stored cross-site scripting vulnerability via axd and cshtml file upload. This allows for potential malicious script execution when a user uploads specific files.

Recommendations For versions prior to 2.10.4, update to version 2.10.4 or later to resolve the issue. As a temporary workaround, consider restricting access to file uploads, especially for axd and cshtml files, until the update is applied.