Skip to content
OpenAdvisories

Package · Packagist

facturascripts/facturascripts

26 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 1.2
    CVE-2025-69210 Public exploit

    FacturaScripts vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload

    FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.7, a stored cross-site scripting (XSS) vulnerability exists in the product file upload functionality. Authenticated users can upload crafted XML files co…