CVE-2022-1514

Impact

FacturaScripts prior to version 2022.06 is vulnerable to stored cross-site scripting via upload plugin functionality in zip format.

Affected packages

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/neorazorx/facturascripts/commit/aa9f28cb86467468f43486b77ddef7ff4d3c687e
• https://huntr.dev/bounties/4ae2a917-843a-4ae4-8197-8425a596761c
• https://github.com/advisories/GHSA-p3w3-4ppm-c3f6
• https://nvd.nist.gov/vuln/detail/CVE-2022-1514