[HIGH] FacturaScripts: Unauthenticated Path Traversal in Static File Controllers Reads Private MyFiles Documents

PKSA-cphp-d9mj-j5ny CVE-2026-45693 GHSA-cv65-7cg8-r623

Affected package: facturascripts/facturascripts

Affected version: <=2026.2

Reported by:
GitHub