Lucene search
Veracode Vulnerability DatabaseVERACODE:35507HistoryMay 13, 2022 - 4:31 a.m.
Cross-site Scripting (XSS)
2022-05-1304:31:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.001 Low
EPSS
Percentile
30.2%
facturascripts/facturascripts is vulnerable to reflected cross-site scripting. The vulnerability exists in the privateCore function of `EditPageOption.php’ due to the lack of sanitization which allows an attacker to inject and execute malicious javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| facturascripts/facturascripts | le | v2022.06 | |
| facturascripts/facturascripts | le | v2022.06 |
References
Related
huntr
huntr
Reflected Xss using url based payload
2022-05-08 08:58:38
github
github
Cross-site Scripting in facturascripts
2022-05-13 00:01:12
osv
osv
Cross-site Scripting in facturascripts
2022-05-13 00:01:12
CVE-2022-1682
2022-05-12 09:15:13
nvd
nvd
CVE-2022-1682
2022-05-12 09:15:13
cnvd
cnvd
FacturaScripts Cross-Site Scripting Vulnerability () CNVD-2022-77854
2022-05-16 00:00:00
cvelist
cvelist
cve
cve
CVE-2022-1682
2022-05-12 09:15:13
prion
prion
Cross site scripting
2022-05-12 09:15:00