CVE Intelligence

ShowDoc vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ShowDoc products: 1 record(s), with severity, exploitation and fixes.

ShowDoc 1

Exploited only (KEV) →

CVE-2025-0520 Critical · 9.4 Public exploit CWE-434 Apr 29, 2025
ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.