[HIGH] FacturaScripts Vulnerable to Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism

PKSA-xfzw-dtp7-gwj8 CVE-2026-27891 GHSA-3pgc-xqg9-cfr6

Affected package: facturascripts/facturascripts

Affected version: <=2025.71

Reported by:
GitHub