ShowDoc vulnerabilities
We track 2 vulnerabilities in ShowDoc products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2026.
2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score
Latest ShowDoc vulnerabilities
- 8.8 High severity
ShowDoc: Improper Control of Generation of Code
ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers can store a template via MockController::add with escaped parentheses that moc
- 9.4 Critical severity
ShowDoc: Unrestricted Upload of File with Dangerous Type
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.