215 matches found
CVE-2022-2066
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
Stored XSS in EditEstadoDocumento
Description In facturascripts/EditEstadoDocumento, the field Icon can be injected an XSS payload into it. Proof of Concept // PoC.js POST /facturascripts/EditEstadoDocumento?code=27&action=save-ok HTTP/1.1 Host: 127.0.0.1 Content-Length: 1224 Cache-Control: max-age=0 sec-ch-ua:...
FacturaScripts Cross-Site Scripting Vulnerability (CNVD-2022-59043)
FacturaScripts is an ERP software. A cross-site scripting vulnerability exists in versions prior to facturascripts 2022.06, which stems from a lack of filename validation, and can be exploited by an attacker to upload a svg file resulting in a cross-site scripting attack...
FacturaScripts Cross-Site Scripting Vulnerability
FacturaScripts is an ERP software. A cross-site scripting vulnerability exists in FacturaScripts versions prior to 2022.06, which can be exploited by an attacker to execute JavaScript code on the client side...
Cross-site Scripting (XSS)
facturascripts/facturascripts is vulnerable to cross site scripting. The vulnerability exists due to a lack of sanitization of the username field allowing an attacker to input maliciously crafted script via the username field when showing 'login-user-not-found' message...
GHSA-FP76-F299-V3HJ Cross-site Scripting in FacturaScripts
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
GHSA-H6WM-MR85-4H9G Cross site scripting in facturascripts
A Cross-site Scripting XSS vulnerability exists in the fsNick parameter in facturascripts prior to version 2022.06...
Cross site scripting in facturascripts
A Cross-site Scripting XSS vulnerability exists in the fsNick parameter in facturascripts prior to version 2022.06...
Cross-site Scripting in FacturaScripts
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2065
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2065
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066
CVE-2022-2066 corresponds to a Cross-site Scripting (XSS) vulnerability that is reflected in the FacturaScripts project (neorazorx/facturascripts) prior to 2022.06. The vulnerability affects the client side, allowing an attacker to inject JavaScript into rendered pages. Multiple records (NVD, Red...
CVE-2022-2065
FacturaScripts (ERP) has a stored XSS in versions prior to 2022.06 caused by lack of filename validation, allowing an attacker to upload an SVG file that leads to script execution. The CVE is associated with CVE-2022-2065 across multiple advisories (NVD, RH, CNVD, OSV, etc.). The exposed componen...