{"cvss":9.4,"datePublished":"2026-04-10T00:00:00Z","dateUpdated":"2026-04-10T00:00:00Z","description":"An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.","dueDate":"","id":"CVE-2025-0520","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"showdoc","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"showdoc showdoc Unrestricted Upload of File with Dangerous Type","vendor":"showdoc"}