Facturascripts/facturascripts

This hub aggregates every CVE we track for Facturascripts/facturascripts, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Facturascripts/facturascripts.

• CVE-2026-25513FacturaScripts has SQL Injection vulnerability in API ORDER BY Clause8.8Feb 4, 2026
• CVE-2026-25514FacturaScripts has SQL Injection vulnerability in Autocomplete Actions8.8Feb 4, 2026
• CVE-2026-23476FacturaScripts Affected by Reflected XSS5.4Feb 2, 2026
• CVE-2026-23997FacturaScripts has a Stored Cross-Site Scripting (XSS) in "Observations" field via History View8.0Feb 2, 2026
• CVE-2025-69210FacturaScripts vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload5.4Dec 30, 2025
• CVE-2022-2066Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts6.1Jun 13, 2022
• CVE-2022-2065Cross-site Scripting (XSS) - Stored in neorazorx/facturascripts5.4Jun 13, 2022
• CVE-2022-2016Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts5.4Jun 7, 2022
• CVE-2022-1988Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts6.1Jun 3, 2022
• CVE-2022-1715Account Takeover in neorazorx/facturascripts9.8May 13, 2022
• CVE-2022-1682Reflected Xss using url based payload in neorazorx/facturascripts6.1May 12, 2022
• CVE-2022-1571Cross-site scripting - Reflected in Create Subaccount in neorazorx/facturascripts6.1May 4, 2022
• CVE-2022-1514Stored XSS via upload plugin functionality in zip format in neorazorx/facturascripts5.4Apr 28, 2022