Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...

CVE-2022-2066 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts

Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...

CVE-2022-2066

CVE-2022-2066 corresponds to a Cross-site Scripting (XSS) vulnerability that is reflected in the FacturaScripts project (neorazorx/facturascripts) prior to 2022.06. The vulnerability affects the client side, allowing an attacker to inject JavaScript into rendered pages. Multiple records (NVD, Red...

CVE-2022-2066 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts

Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...

CVE-2022-2065

FacturaScripts (ERP) has a stored XSS in versions prior to 2022.06 caused by lack of filename validation, allowing an attacker to upload an SVG file that leads to script execution. The CVE is associated with CVE-2022-2065 across multiple advisories (NVD, RH, CNVD, OSV, etc.). The exposed componen...

CVE-2022-2065 Cross-site Scripting (XSS) - Stored in neorazorx/facturascripts

Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...

CVE-2022-2065 Cross-site Scripting (XSS) - Stored in neorazorx/facturascripts

Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...

FacturaScripts 跨站脚本漏洞

FacturaScripts is an ERP software. A cross-site scripting vulnerability exists in versions prior to facturascripts 2022.06, which stems from a lack of filename validation, and can be exploited by an attacker to upload a svg file resulting in a cross-site scripting attack...

FacturaScripts 跨站脚本漏洞

FacturaScripts is an ERP software. A cross-site scripting vulnerability exists in FacturaScripts versions prior to 2022.06, which can be exploited by an attacker to execute JavaScript code on the client side...

Cross-site Scripting in FacturaScripts

Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts. A patch is available on the master branch of the repository in commit 7b4ddb92...

GHSA-J8C7-3JPQ-8985 Cross-site Scripting in FacturaScripts

Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts. A patch is available on the master branch of the repository in commit 7b4ddb92...

CVE-2022-2016

Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1...

CVE-2022-2016

Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1...

FacturaScripts 跨站脚本漏洞

FacturaScripts is an open source ERP software from Carlos Garcia, an individual developer in Spain. A security vulnerability exists in FacturaScripts versions prior to 2022.1 that stems from the presence of a stored cross-site scripting XSS vulnerability...

CVE-2022-2016 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts

Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1...

CVE-2022-2016 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts

Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1...

CVE-2022-2016

CVE-2022-2016 involves a reflected Cross-site Scripting (XSS) vulnerability in FacturaScripts (neorazorx/facturascripts) before version 2022.1. Public sources describe a reflected XSS via user-controlled input, with some references citing a potential vector in the Balance.php file (codbalance par...

Cross-site Scripting (XSS)

facturascripts/facturascripts is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the descripcion parameter in the test function of Cuenta.php, allowing an attacker to inject and execute malicious taint data...

Cross-site scripting - Reflected XSS caused by error logs in neorazorx/facturascripts

Description There are two fields that can insert the XSS payload by the error log. 1. http://127.0.0.1/facturascripts/EditBalance, the codbalance field 2. http://127.0.0.1/facturascripts/EditSettings, the tipoidfiscal field in Fiscal Id Both fields require 1 and 25 numbers or letters, no spaces,...

GHSA-R7JW-MG27-J839 Cross-site Scripting in FacturaScripts

FacturaScripts 2022.08 and prior is vulnerable to cross-site scripting. A patch is available on the master branch of the repository and anticipated to be part of version 2022.09...