~ / search / GHSA-p3w3-4ppm-c3f6

GHSA-p3w3-4ppm-c3f6

Cross site scripting in FacturaScripts

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-1514

Packages

EcosystemPackageAffectedFixed in
Packagist facturascripts/facturascripts < 2022.06 2022.06

Details

As written in the advisory (Markdown source, shown as plain text).

FacturaScripts prior to version 2022.06 is vulnerable to stored cross-site scripting via upload plugin functionality in zip format.

References

External links from the advisory. They lead to third-party sites.