Skip to content
OpenAdvisories

Vendor

NeoRazorX

22 known vulnerabilities.

Products

facturascripts 13 neorazorx/facturascripts 9
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.9
    CVE-2026-27964

    FacturaScripts: Reflected Cross-Site Scripting (XSS) via Cookie Manipulation

    FacturaScripts is an open source accounting and invoicing software. Versions 2025.7 and prior contain a Reflected Cross-Site Scripting (XSS) vulnerability through the fsNick cookie parameter. The application reflects the cookie's value directly into the HTML …

    NeoRazorX facturascripts facturascripts/facturascripts Packagist
  • Low 1.2
    CVE-2025-69210 Public exploit

    FacturaScripts vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload

    FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.7, a stored cross-site scripting (XSS) vulnerability exists in the product file upload functionality. Authenticated users can upload crafted XML files co…

    NeoRazorX facturascripts facturascripts/facturascripts Packagist