CVE-2025-0520
Critical · CVSS 9.4- CVSS
- 9.4
- nvd
- EPSS
- 2.65%
- 85th pct
- KEV
- No
- Class
- oss containerizable
- CWE-434
Description
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.
Affected packages
| Packagist | showdoc/showdoc | 0 → 2.8.7 |
References
Status: profiled · ingested 2026-10-08T18:00:43.000Z