CVE-2018-19621: Showdoc

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.

Affected products

• Showdoc Showdoc: version 2.4.2 only

Published 2018-11-28. Last modified 2026-06-17.