Cross-site Scripting in FacturaScripts

2022-05-0500:00:26

Google

osv.dev

0.001 Low

EPSS

Percentile

30.2%

JSON

FacturaScripts versions 2022.06 and prior are vulnerable to reflected cross-site scripting attacks. This vulnerability can use arbitrarily executed javascript code to steal users’ cookies, perform HTTP request, get content of same origin page, etc. A fix is available on the master branch of the GitHub repository and anticipated to be part of version 2022.07.

CPENameOperatorVersion
facturascripts/facturascriptseq2018.13
facturascripts/facturascriptseq2018.11
facturascripts/facturascriptseq2021.2
facturascripts/facturascriptseq2020.80
facturascripts/facturascriptseq2018.04
facturascripts/facturascriptseq2018.03
facturascripts/facturascriptseq2018.15
facturascripts/facturascriptseq2020.2
facturascripts/facturascriptseq2020.3
facturascripts/facturascriptseq2018.05

Name	Operator	Version
facturascripts/facturascripts	eq	2018.13
facturascripts/facturascripts	eq	2018.11
facturascripts/facturascripts	eq	2021.2
facturascripts/facturascripts	eq	2020.80
facturascripts/facturascripts	eq	2018.04
facturascripts/facturascripts	eq	2018.03
facturascripts/facturascripts	eq	2018.15
facturascripts/facturascripts	eq	2020.2
facturascripts/facturascripts	eq	2020.3
facturascripts/facturascripts	eq	2018.05