CVE-2025-0520 — ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This iss…
Published: 2025-04-29 · CVSS: 9.4 · CVSS 4.0
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7