GHSA-gq77-3r6x-383w

GitHub Security Advisory

Cross-site Scripting in ShowDoc

✓ GitHub Reviewed MODERATE Has CVE

ShowDoc version 2.10.3 and prior is vulnerable to stored cross-site scripting. A patch is available and anticipated to be part of version 2.10.4.

Packagist showdoc/showdoc

Affected versions: 0 (fixed in 2.10.4)

CVE-2022-0880

GHSA ID

GHSA-gq77-3r6x-383w

Published

March 13, 2022 12:00 AM

Last Modified

March 23, 2022 2:22 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

showdoc/showdoc

GitHub Reviewed

✓ Yes

Last updated: September 16, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.