CYBERSIXT Signal Over Noise
All CVEs
Vulnerability intelligence

CVE-2025-0520

CWE-434

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.

CVSS Score
9.4
Critical
EPSS — Exploit Probability
1.0%
Riskier than 59% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
Patch available
Vendor fix published
NVD entry Vendor patch PoC / advisory

2 articles across 2 outlets · first covered Apr 14, 2026 · latest Apr 14, 2026

Coverage timeline