[showdoc/showdoc] Cross-site Scripting in ShowDoc

ShowDoc version 2.10.3 and prior is vulnerable to stored cross-site scripting. A patch is available and anticipated to be part of version 2.10.4.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-0880
• https://github.com/star7th/showdoc/commit/818d7fe731f452acccacf731ce47ec27ad68049c
• https://huntr.dev/bounties/df347aa9-ed9b-4f75-af99-c83b8aad3bcf
• https://github.com/advisories/GHSA-gq77-3r6x-383w