| Package | Affected versions | Patched versions |
|---|---|---|
| facturascripts/facturascripts | < 2022.07 | 2022.07 |
| facturascripts | < 2022.07 | 2022.07 |
FacturaScripts versions 2022.06 and prior are vulnerable to reflected cross-site scripting attacks. This vulnerability can use arbitrarily executed javascript code to steal users' cookies, perform HTTP request, get content of same origin page, etc. A fix is available on the master branch of the GitHub repository and anticipated to be part of version 2022.07.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free