star7th
- Total products in the ecosystem
- 2
- Total vulnerabilities (90 days)
- 1
en
Verify to analyze this security profile
As of 09/13/2026, star7th recorded 1 security vulnerabilities in the last 90 days across 1 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, ShowDoc had the most security vulnerabilities in the star7th ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-86644star7th showdoc API Page Save Endpoint editormd.js cross site scripting | Exploitation statusPublic exploit | FixYes | Affected productShowDoc | Published09/08/2026 | SeverityMedium |
CVE-2026-6982star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection | Exploitation statusNot known exploited | FixYes | Affected productShowDoc | Published04/25/2026 | SeverityMedium |
CVE-2022-1034There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/22/2022 | SeverityCritical |
CVE-2022-0964Stored XSS viva .webmv file upload in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/15/2022 | SeverityHigh |
CVE-2022-0965Stored XSS viva .ofd file upload in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/15/2022 | SeverityCritical |
CVE-2022-0966Stored XSS via File Upload in star7th/showdoc in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/15/2022 | SeverityMedium |
CVE-2022-0967Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/15/2022 | SeverityMedium |
CVE-2022-0942Stored XSS due to Unrestricted File Upload in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/15/2022 | SeverityCritical |
CVE-2022-0957Stored XSS via File Upload in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/15/2022 | SeverityHigh |
CVE-2022-0956Stored XSS via File Upload in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/15/2022 | SeverityHigh |
CVE-2022-0951File Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/15/2022 | SeverityHigh |
CVE-2022-0950Unrestricted Upload of File with Dangerous Type in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/15/2022 | SeverityMedium |
CVE-2022-0945Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/15/2022 | SeverityCritical |
CVE-2022-0962Stored XSS viva .webma file upload in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/14/2022 | SeverityCritical |
CVE-2022-0960Stored XSS viva .properties file upload in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/14/2022 | SeverityCritical |
CVE-2022-0946Stored XSS viva cshtm file upload in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/14/2022 | SeverityCritical |
CVE-2022-0941Stored XSS due to Unrestricted File Upload in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/14/2022 | SeverityHigh |
CVE-2022-0940Stored XSS due to Unrestricted File Upload in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/14/2022 | SeverityMedium |
CVE-2022-0938Stored XSS via file upload in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/14/2022 | SeverityHigh |
CVE-2022-0937Stored xss in showdoc through file upload in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/14/2022 | SeverityMedium |
CVE-2022-0880Cross-site Scripting (XSS) - Stored in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published03/12/2022 | SeverityHigh |
CVE-2022-0409Unrestricted Upload of File with Dangerous Type in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published02/19/2022 | SeverityHigh |
CVE-2022-0362SQL Injection in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published01/26/2022 | SeverityMedium |
CVE-2021-4172Cross-site Scripting (XSS) - Stored in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published01/22/2022 | SeverityMedium |
CVE-2022-0079Generation of Error Message Containing Sensitive Information in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published01/03/2022 | SeverityMedium |
CVE-2021-4168Cross-Site Request Forgery (CSRF) in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published12/26/2021 | SeverityMedium |
CVE-2021-4000Open Redirect in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published12/03/2021 | SeverityMedium |
CVE-2021-3989Open Redirect in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published12/01/2021 | SeverityMedium |
CVE-2021-3990Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published12/01/2021 | SeverityMedium |
CVE-2021-3993Cross-Site Request Forgery (CSRF) in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published12/01/2021 | SeverityMedium |
CVE-2021-4017Cross-Site Request Forgery (CSRF) in star7th/showdoc | Exploitation statusNot confirmed | FixYes | Affected productstar7th/showdoc | Published12/01/2021 | SeverityHigh |
CVE-2021-3683Cross-Site Request Forgery (CSRF) in star7th/showdoc | Exploitation statusNot confirmed | FixNot confirmed | Affected productstar7th/showdoc | Published11/13/2021 | SeverityMedium |
CVE-2021-3775Cross-Site Request Forgery (CSRF) in star7th/showdoc | Exploitation statusNot confirmed | FixNot confirmed | Affected productstar7th/showdoc | Published11/13/2021 | SeverityMedium |
CVE-2021-3776Cross-Site Request Forgery (CSRF) in star7th/showdoc | Exploitation statusNot confirmed | FixNot confirmed | Affected productstar7th/showdoc | Published11/13/2021 | SeverityMedium |
CVE-2021-3678Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc | Exploitation statusNot confirmed | FixNot confirmed | Affected productstar7th/showdoc | Published08/04/2021 | SeverityHigh |
CVE-2021-3680Missing Cryptographic Step in star7th/showdoc | Exploitation statusNot confirmed | FixNot confirmed | Affected productstar7th/showdoc | Published08/04/2021 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan