CVE-2022-1514

CRITICAL9.0EPSS 0.40%

Cross site scripting in FacturaScripts

Published: 4/29/2022Modified: 11/8/2023
Also known as:GHSA-p3w3-4ppm-c3f6

Description

FacturaScripts prior to version 2022.06 is vulnerable to stored cross-site scripting via upload plugin functionality in zip format.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.0CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

References (4)