Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2025-0520

ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution

Description

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ShowDoc ShowDoc

Default version status: unaffected

  • 0 to < 2.8.7affected
pkg:composer/showdoc/showdoc

References