Cross site scripting in FacturaScripts

2022-04-2900:00:23

Google

osv.dev

0.001 Low

EPSS

Percentile

21.6%

JSON

FacturaScripts prior to version 2022.06 is vulnerable to stored cross-site scripting via upload plugin functionality in zip format.

CPENameOperatorVersion
facturascripts/facturascriptseq2018.13
facturascripts/facturascriptseq2018.11
facturascripts/facturascriptseq2021.2
facturascripts/facturascriptseq2020.80
facturascripts/facturascriptseq2018.04
facturascripts/facturascriptseq2018.03
facturascripts/facturascriptseq2018.15
facturascripts/facturascriptseq2020.2
facturascripts/facturascriptseq2020.3
facturascripts/facturascriptseq2018.05

Name	Operator	Version
facturascripts/facturascripts	eq	2018.13
facturascripts/facturascripts	eq	2018.11
facturascripts/facturascripts	eq	2021.2
facturascripts/facturascripts	eq	2020.80
facturascripts/facturascripts	eq	2018.04
facturascripts/facturascripts	eq	2018.03
facturascripts/facturascripts	eq	2018.15
facturascripts/facturascripts	eq	2020.2
facturascripts/facturascripts	eq	2020.3
facturascripts/facturascripts	eq	2018.05