Description
Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| neorazorx | neorazorx/facturascripts | unspecified – < 2022.07 | 2022.07 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | facturascripts/facturascripts | < 2022.08 | 2022.08 | GHSA-6465-r752-2h8v |