VULNERABILITY INTELLIGENCE
CVE-2025-0520
EPSS probability2.44%
CISA KEVNot currently listed
Published2025-04-29
Last modified2026-10-08
Description
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.
Weakness classification
- disclosure@vulncheck.com: CWE-434