278 matches found
FacturaScripts Cross-Site Scripting Vulnerability (CNVD-2022-59043)
FacturaScripts is an ERP software. A cross-site scripting vulnerability exists in versions prior to facturascripts 2022.06, which stems from a lack of filename validation, and can be exploited by an attacker to upload a svg file resulting in a cross-site scripting attack...
Cross-site Scripting (XSS)
facturascripts/facturascripts is vulnerable to cross site scripting. The vulnerability exists due to a lack of sanitization of the username field allowing an attacker to input maliciously crafted script via the username field when showing 'login-user-not-found' message...
Cross-site Scripting in FacturaScripts
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
GHSA-FP76-F299-V3HJ Cross-site Scripting in FacturaScripts
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
Cross site scripting in facturascripts
A Cross-site Scripting XSS vulnerability exists in the fsNick parameter in facturascripts prior to version 2022.06...
GHSA-H6WM-MR85-4H9G Cross site scripting in facturascripts
A Cross-site Scripting XSS vulnerability exists in the fsNick parameter in facturascripts prior to version 2022.06...
CVE-2022-2066
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2065
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2065
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066
CVE-2022-2066 corresponds to a Cross-site Scripting (XSS) vulnerability that is reflected in the FacturaScripts project (neorazorx/facturascripts) prior to 2022.06. The vulnerability affects the client side, allowing an attacker to inject JavaScript into rendered pages. Multiple records (NVD, Red...
CVE-2022-2066 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2065
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2065 Cross-site Scripting (XSS) - Stored in neorazorx/facturascripts
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2065
FacturaScripts (ERP) has a stored XSS in versions prior to 2022.06 caused by lack of filename validation, allowing an attacker to upload an SVG file that leads to script execution. The CVE is associated with CVE-2022-2065 across multiple advisories (NVD, RH, CNVD, OSV, etc.). The exposed componen...