{"vulnerability": "CVE-2022-0967", "sightings": [{"uuid": "22dc7c78-0a19-49c4-97b1-3f49c8a6364d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0967", "type": "seen", "source": "https://t.me/cibsecurity/38944", "content": "\u203c CVE-2022-0967 \u203c\n\nStored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-15T19:19:35.000000Z"}, {"uuid": "d8b7e2b5-06e3-4767-90b7-3bce9680a0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0967", "type": "seen", "source": "https://t.me/hacking_Attack/53796", "content": "Exploit Collector\nShowdoc 2.10.3 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Gb5I5b_xjQ0/WWlu86s-SoI/AAAAAAAAIJk/Vrr0JqyMe7wOp_97KyfJoVRHnDW4ZjPNwCLcBGAs/s1600/h112.png \nShowdoc versions 2.10.3 and below suffer from a persistent cross site scripting vulnerability.\n\nSHA-256 | 9794c5dc51ff960938f2de93bd6a7f9916dd3f208482681592b1d965acd7691a\n\nDownload\n# Exploit Title: Showdoc 2.10.3 - Stored Cross-Site Scripting (XSS)\n# Exploit Author: Akshay Ravi\n# Vendor Homepage: https://github.com/star7th/showdoc\n# Software Link: https://github.com/star7th/showdoc/releases/tag/v2.10.3\n# Version: <=\n# Tested on: macOS Monterey\n# CVE : CVE-2022-0967\n\nDescription: Stored XSS via uploading file in .ofd format\n\n1. Create a file with .ofd extension and add XSS Payload inside the file\n\nfilename = \"payload.ofd\"\npayload = \"\"\n\n2. Login to showdoc v2.10.2 and go to file library\n\nEndpoint = \"https://www.site.com/attachment/index\"\n\n3. Upload the payload on file library and click on the check button\n4. The XSS payload will executed once we visited the URL\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:39.387012Z"}, {"uuid": "41189640-6a0c-498d-af3a-41848bb8c149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0967", "type": "seen", "source": "https://t.me/hacking_Attack/53796", "content": "Exploit Collector\nShowdoc 2.10.3 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Gb5I5b_xjQ0/WWlu86s-SoI/AAAAAAAAIJk/Vrr0JqyMe7wOp_97KyfJoVRHnDW4ZjPNwCLcBGAs/s1600/h112.png \nShowdoc versions 2.10.3 and below suffer from a persistent cross site scripting vulnerability.\n\nSHA-256 | 9794c5dc51ff960938f2de93bd6a7f9916dd3f208482681592b1d965acd7691a\n\nDownload\n# Exploit Title: Showdoc 2.10.3 - Stored Cross-Site Scripting (XSS)\n# Exploit Author: Akshay Ravi\n# Vendor Homepage: https://github.com/star7th/showdoc\n# Software Link: https://github.com/star7th/showdoc/releases/tag/v2.10.3\n# Version: <=\n# Tested on: macOS Monterey\n# CVE : CVE-2022-0967\n\nDescription: Stored XSS via uploading file in .ofd format\n\n1. Create a file with .ofd extension and add XSS Payload inside the file\n\nfilename = \"payload.ofd\"\npayload = \"\"\n\n2. Login to showdoc v2.10.2 and go to file library\n\nEndpoint = \"https://www.site.com/attachment/index\"\n\n3. Upload the payload on file library and click on the check button\n4. The XSS payload will executed once we visited the URL\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:49.136238Z"}]}