Skip to content
OpenAdvisories

Vendor

FacturaScripts

2 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 6.9

    Multiple vulnerabilities in FacturaScripts

    Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses when attempting to log in with a valid username compared to an invalid one. An unauthenticated attacker could systematically identify valid us…

  • Medium 6.9

    Multiple vulnerabilities in FacturaScripts

    Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate validation or sanitisation of user input in the ‘city’ and ‘province’ fields in the ‘ListAlmacen’ endpoint. Successful exploitation of this vulnerability could …