Neorazorx Facturascripts

12 CVEs affecting Neorazorx Facturascripts. Latest disclosed: 2026-05-27. Critical: 0, High: 2.

Top CVEs affecting Neorazorx Facturascripts
CVESeverityScorePublishedSummary
CVE-2026-23997High8.02026-02-02FacturaScripts is open-source enterprise resource planning and accounting software. In 2025.71 and earlier, a Stored Cross-Site Scripting (XSS) vulnerability w…
CVE-2026-27891High7.22026-05-18FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerability in the Plugins::add() function. Th…
CVE-2026-27892Medium6.52026-05-18FacturaScripts is an open source accounting and invoicing software. In versions prior to 2026, the Library module stores and serves uploaded images byte-for-by…
CVE-2026-42879Medium6.32026-05-27FacturaScripts is an open source accounting and invoicing software. In 2025.81 and earlier, an authenticated unrestricted file upload vulnerability exists in F…
CVE-2026-42877Medium5.42026-05-27FacturaScripts is an open source accounting and invoicing software. In 2025.92 and earlier, a stored Cross-Site Scripting (XSS) vulnerability exists in the pro…
CVE-2026-23476Medium5.42026-02-02FacturaScripts is open-source enterprise resource planning and accounting software. Prior to 2025.8, there a reflected XSS bug in FacturaScripts. The problem i…
CVE-2026-42878Medium5.32026-05-27FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an unauthenticated information disclosure vulnerability in the Installer co…
CVE-2026-27964Low3.92026-05-18FacturaScripts is an open source accounting and invoicing software. Versions 2025.7 and prior contain a Reflected Cross-Site Scripting (XSS) vulnerability thro…
CVE-2026-326992026-05-05FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter durin…
CVE-2026-255132026-02-04FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScripts contains a critical SQL injection…
CVE-2026-255142026-02-04FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScripts contains a critical SQL injection…
CVE-2025-692102025-12-30FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.7, a stored cross-site scripting (XSS) vulnerability…