CVE-2022-1682

2022-05-1209:15:13

Google

osv.dev

0.001 Low

EPSS

Percentile

30.2%

JSON

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user’s cookies which lead to Account takeover or do any malicious activity in victim’s browser

CPENameOperatorVersion
facturascriptseq2018.11
facturascriptseq2020.2
facturascriptseq2020.4
facturascriptseq2018.04
facturascriptseq2020.3
facturascriptseq2018.12
facturascriptseq2018.05
facturascriptseq2021.4
facturascriptseq2020.01
facturascriptseq2021.2

Name	Operator	Version
facturascripts	eq	2018.11
facturascripts	eq	2020.2
facturascripts	eq	2020.4
facturascripts	eq	2018.04
facturascripts	eq	2020.3
facturascripts	eq	2018.12
facturascripts	eq	2018.05
facturascripts	eq	2021.4
facturascripts	eq	2020.01
facturascripts	eq	2021.2