https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:20:11.541816+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-20521 cnvd-2022-20521 2026-10-04T09:20:11.608907+00:00 cnvd-2022-20521 https://cve.radiocsirt.org/vuln/euvd-2026-11354 EUVD-2026-11354 2026-10-04T09:20:11.608945+00:00 EUVD-2026-11354 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0960 fkie_cve-2022-0960 2026-10-04T09:20:11.608959+00:00

Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4.

 https://cve.radiocsirt.org/vuln/ghsa-rphc-h572-2x9f GHSA-rphc-h572-2x9f — Cross-site Scripting in showdoc/showdoc 2026-10-04T09:20:11.608988+00:00

Affected: Packagist: showdoc/showdoc

ShowDoc is a tool greatly applicable for an IT team to share documents online. showdoc/showdoc allows .properties files to upload which lead to stored XSS in versions prior to 2.10.4. This allows attackers to execute malicious scripts in the user's browser. This issue was patched in version 2.10.4. There is currently no known workaround.

 https://cve.radiocsirt.org/vuln/gsd-2022-0960 gsd-2022-0960 2026-10-04T09:20:11.609014+00:00 gsd-2022-0960