~ / search / GHSA-h6wm-mr85-4h9g

GHSA-h6wm-mr85-4h9g

Cross site scripting in facturascripts

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-2066

Packages

EcosystemPackageAffectedFixed in
Packagist facturascripts/facturascripts < 2022.06 2022.06

Details

As written in the advisory (Markdown source, shown as plain text).

A Cross-site Scripting (XSS) vulnerability exists in the fsNick parameter in facturascripts prior to version 2022.06

References

External links from the advisory. They lead to third-party sites.