CVE-2026-23997

FacturaScripts is open-source enterprise resource planning and accounting software. In 2025.71 and earlier, a Stored Cross-Site Scripting XSS vulnerability was discovered in the Observations field. The flaw occurs in the History view, where historical data is rendered without proper HTML entity...

CVE-2026-23997

creationtimestamp| type| source ---|---|--- 2026-02-02 10:50:35+00:00| published-proof-of-concept| https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-4v7v-7v7r-3r5h 2026-02-02 23:21:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvyeaundd2r 2026-02-02...