Star7th vulnerabilities
37 CVEs and advisories name Star7th as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-119661ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries
- CVE-2026-86644star7th showdoc API Page Save Endpoint editormd.js cross site scripting
- CVE-2026-6982star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection
- CVE-2022-1034There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdoc
- CVE-2022-0964Stored XSS viva .webmv file upload in star7th/showdoc
- CVE-2022-0965Stored XSS viva .ofd file upload in star7th/showdoc
- CVE-2022-0966Stored XSS via File Upload in star7th/showdoc in star7th/showdoc
- CVE-2022-0967Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc
- CVE-2022-0942Stored XSS due to Unrestricted File Upload in star7th/showdoc
- CVE-2022-0957Stored XSS via File Upload in star7th/showdoc
- CVE-2022-0956Stored XSS via File Upload in star7th/showdoc
- CVE-2022-0951File Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc
- CVE-2022-0950Unrestricted Upload of File with Dangerous Type in star7th/showdoc
- CVE-2022-0945Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc
- CVE-2022-0962Stored XSS viva .webma file upload in star7th/showdoc
- CVE-2022-0960Stored XSS viva .properties file upload in star7th/showdoc
- CVE-2022-0946Stored XSS viva cshtm file upload in star7th/showdoc
- CVE-2022-0941Stored XSS due to Unrestricted File Upload in star7th/showdoc
- CVE-2022-0940Stored XSS due to Unrestricted File Upload in star7th/showdoc
- CVE-2022-0938Stored XSS via file upload in star7th/showdoc
- CVE-2022-0937Stored xss in showdoc through file upload in star7th/showdoc
- CVE-2022-0880Cross-site Scripting (XSS) - Stored in star7th/showdoc
- CVE-2022-0409Unrestricted Upload of File with Dangerous Type in star7th/showdoc
- CVE-2022-0362SQL Injection in star7th/showdoc
- CVE-2021-4172Cross-site Scripting (XSS) - Stored in star7th/showdoc
- CVE-2022-0079Generation of Error Message Containing Sensitive Information in star7th/showdoc
- CVE-2021-4168Cross-Site Request Forgery (CSRF) in star7th/showdoc
- CVE-2021-4000Open Redirect in star7th/showdoc
- CVE-2021-3989Open Redirect in star7th/showdoc
- CVE-2021-3990Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc