Lucene search
Veracode Vulnerability DatabaseVERACODE:35320HistoryApr 29, 2022 - 4:16 a.m.
Cross-site Scripting (XSS)
2022-04-2904:16:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
21.6%
facturascripts/facturascripts is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the ini parameter in the getPluginInfo function of PluginManager.php, allowing an attacker to inject and execute malicious javascript
| CPE | Name | Operator | Version |
|---|---|---|---|
| facturascripts/facturascripts | le | v2021.81 | |
| facturascripts/facturascripts | le | v2021.81 |
Related
huntr
huntr
Stored XSS via upload plugin functionality in zip format
2022-04-21 18:43:55
cvelist
cvelist
nvd
nvd
CVE-2022-1514
2022-04-28 16:15:08
cve
cve
CVE-2022-1514
2022-04-28 16:15:08
osv
osv
Cross site scripting in FacturaScripts
2022-04-29 00:00:23
CVE-2022-1514
2022-04-28 16:15:08
prion
prion
Cross site scripting
2022-04-28 16:15:00
github
github
Cross site scripting in FacturaScripts
2022-04-29 00:00:23