[MEDIUM] FacturaScripts vulnerable to stored XSS via product reference in sales/purchases

PKSA-1ktk-zddg-2f2s CVE-2026-42877 GHSA-r736-2678-fcrx

Affected package: facturascripts/facturascripts

Affected version: <=2025.92

Reported by:
GitHub