Facturascripts

14 CVEs across 1 Facturascripts products. Browse Facturascripts vulnerabilities, severities, and proof-of-concept exploits.

Facturascripts products with known CVEs

ProductCVEs
Facturascripts14
Facturascripts CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25514High8.82026-02-04FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScripts contains a critical SQL injection…
CVE-2026-25513High8.82026-02-04FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScripts contains a critical SQL injection…
CVE-2026-23997High8.02026-02-02FacturaScripts is open-source enterprise resource planning and accounting software. In 2025.71 and earlier, a Stored Cross-Site Scripting (XSS) vulnerability w…
CVE-2026-23476Medium5.42026-02-02FacturaScripts is open-source enterprise resource planning and accounting software. Prior to 2025.8, there a reflected XSS bug in FacturaScripts. The problem i…
CVE-2025-69210Medium5.42025-12-30FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.7, a stored cross-site scripting (XSS) vulnerability…
CVE-2022-2066Medium6.12022-06-13Cross-site Scripting (XSS) - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06.
CVE-2022-2065Medium5.42022-06-13Cross-site Scripting (XSS) - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06.
CVE-2022-2016Medium5.42022-06-09Cross-site Scripting (XSS) - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1.
CVE-2022-1988Medium6.12022-06-03Cross-site Scripting (XSS) - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09.
CVE-2022-1715Critical9.82022-05-13Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07.
CVE-2022-1682Medium6.12022-05-12Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account…
CVE-2022-1571Medium6.12022-05-04Cross-site scripting - Reflected in Create Subaccount in GitHub repository neorazorx/facturascripts prior to 2022.07. This vulnerability can be arbitrarily exe…
CVE-2022-1514Medium5.42022-04-28Stored XSS via upload plugin functionality in zip format in GitHub repository neorazorx/facturascripts prior to 2022.06. Cross-site scripting attacks can have…
CVE-2022-1457Medium5.42022-04-25Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascripts prior to 2022.04. Cross-site scriptin…