[HIGH] FacturaScripts is Vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload

PKSA-5rds-6cgc-6zg4 CVE-2025-69210 GHSA-2267-xqcf-gw2m

Affected version: <=2025.4|=2025.43|=2025.41|=2025.11

Reported by:
GitHub

[MEDIUM] Cross-site Scripting in FacturaScripts

PKSA-hvm2-2b51-bg7x CVE-2022-2065 GHSA-fp76-f299-v3hj

Affected version: <2022.06

Reported by:
GitHub

[MEDIUM] Cross site scripting in facturascripts

PKSA-722c-pphk-6krx CVE-2022-2066 GHSA-h6wm-mr85-4h9g

Affected version: <2022.06

Reported by:
GitHub

[MEDIUM] Cross-site Scripting in FacturaScripts

PKSA-y9jr-nh92-xscm CVE-2022-2016 GHSA-j8c7-3jpq-8985

Affected version: <=2022.08

Reported by:
GitHub

[MEDIUM] Cross-site Scripting in FacturaScripts

PKSA-8jw7-xw28-wxz7 CVE-2022-1988 GHSA-r7jw-mg27-j839

Affected version: <=2022.08

Reported by:
GitHub

[CRITICAL] Account takeover in facturascripts

PKSA-byqn-jvrk-5b8k CVE-2022-1715 GHSA-vjq3-x3f2-fvxq

Affected version: <2022.08

Reported by:
GitHub

[MEDIUM] Cross-site Scripting in facturascripts

PKSA-cnrw-hm62-dzxh CVE-2022-1682 GHSA-6465-r752-2h8v

Affected version: <2022.08

Reported by:
GitHub

[MEDIUM] Cross-site Scripting in FacturaScripts

PKSA-w7h2-vq2b-xgtq CVE-2022-1571 GHSA-m8gv-gvhf-7rhp

Affected version: <=2022.06

Reported by:
GitHub

[CRITICAL] Cross site scripting in FacturaScripts

PKSA-6jw3-g1hq-g7j2 CVE-2022-1514 GHSA-p3w3-4ppm-c3f6

Affected version: <2022.06

Reported by:
GitHub