GHSA-6465-r752-2h8v
Cross-site Scripting in facturascripts
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | facturascripts/facturascripts | < 2022.08 | 2022.08 |
Details
As written in the advisory (Markdown source, shown as plain text).
Reflected cross-site scripting using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.08. This can lead to theft of a user's cookies, which in turn could lead to account takeover or do other malicious activities in a victim's browser.
References
External links from the advisory. They lead to third-party sites.