Neorazorx Facturascripts vulnerabilities

• facturascripts Multiple vulnerabilities in FacturaScripts CVE-2026-11960 6.9 MediumOctober 20, 2026
• facturascripts Multiple vulnerabilities in FacturaScripts CVE-2026-11959 6.9 MediumOctober 20, 2026
• neorazorx facturascripts FacturaScripts < 2026.7 PHP Object Injection via WidgetSelect CVE-2026-104905 Public exploit 6.1 MediumOctober 5, 2026
• neorazorx facturascripts FacturaScripts: Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images CVE-2026-42879 Public exploit 6.3 MediumMay 7, 2026
• neorazorx facturascripts FacturaScripts: Unauthenticated phpinfo() Disclosure via Installer Endpoint in FacturaScripts CVE-2026-42878 5.3 MediumMay 7, 2026
• neorazorx facturascripts FacturaScripts: Stored XSS via product reference in sales/purchases CVE-2026-42877 5.4 MediumMay 7, 2026
• neorazorx facturascripts FacturaScripts: Reflected Cross-Site Scripting (XSS) via Cookie Manipulation CVE-2026-27964 Fix available 3.9 LowMay 7, 2026
• neorazorx facturascripts FacturaScripts: Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download CVE-2026-27892 Fix available 6.5 MediumMay 7, 2026
• neorazorx facturascripts Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism CVE-2026-27891 7.2 HighMay 7, 2026
• neorazorx facturascripts FacturaScripts unauthorized modification of immutable nick field via EditUser controller CVE-2026-32699 Public exploit 5.3 MediumApril 28, 2026
• facturascripts FacturaScripts has SQL Injection vulnerability in Autocomplete Actions CVE-2026-25514 Public exploitFix available 8.7 HighFebruary 3, 2026
• facturascripts FacturaScripts has SQL Injection vulnerability in API ORDER BY Clause CVE-2026-25513 Public exploitFix available 8.3 HighFebruary 3, 2026
• facturascripts FacturaScripts has a Stored Cross-Site Scripting (XSS) in "Observations" field via History View CVE-2026-23997 8.0 HighFebruary 2, 2026
• facturascripts FacturaScripts Affected by Reflected XSS CVE-2026-23476 Fix available 5.4 MediumFebruary 2, 2026
• facturascripts FacturaScripts vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload CVE-2025-69210 Public exploitFix available 1.2 LowDecember 30, 2025
• facturascripts, neorazorx neorazorx/facturascripts +1 more Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts CVE-2022-2066 Fix available 7.1 HighJune 13, 2022
• facturascripts, neorazorx neorazorx/facturascripts +1 more Cross-site Scripting (XSS) - Stored in neorazorx/facturascripts CVE-2022-2065 Fix available 8.6 HighJune 13, 2022
• facturascripts, neorazorx neorazorx/facturascripts +1 more Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts CVE-2022-2016 6.8 MediumJune 7, 2022
• facturascripts, neorazorx neorazorx/facturascripts +1 more Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts CVE-2022-1988 6.5 MediumJune 3, 2022
• facturascripts, neorazorx neorazorx/facturascripts +1 more Account Takeover in neorazorx/facturascripts CVE-2022-1715 Fix available 9.8 CriticalMay 13, 2022
• facturascripts, neorazorx neorazorx/facturascripts +1 more Reflected Xss using url based payload in neorazorx/facturascripts CVE-2022-1682 Fix available 9.4 CriticalMay 12, 2022
• facturascripts, neorazorx neorazorx/facturascripts +1 more Cross-site scripting - Reflected in Create Subaccount in neorazorx/facturascripts CVE-2022-1571 Fix available 9.9 CriticalMay 4, 2022
• facturascripts, neorazorx neorazorx/facturascripts +1 more Stored XSS via upload plugin functionality in zip format in neorazorx/facturascripts CVE-2022-1514 Fix available 9.0 CriticalApril 28, 2022
• facturascripts, neorazorx neorazorx/facturascripts +1 more Store XSS in title parameter executing at EditUser Page & EditProducto page in neorazorx/facturascripts CVE-2022-1457 Fix available 9.0 CriticalApril 25, 2022