Login Request a demo
FA
Product
facturascripts
by NeoRazorX · last CVE Oct 5, 2026
13
CVEs
0
On KEV
9.0
Max CVSS
1
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 1High 4Medium 7Low 1
Severity
All severities13Critical1High4Medium7Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add facturascripts to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-23997
9.0
0%
Feb 2
FacturaScripts has a Stored Cross-Site Scripting (XSS) in "Observations" field via History View
Affected: <= 2025.71
CVE-2026-25513
8.8
1%
Feb 4
FacturaScripts has SQL Injection vulnerability in API ORDER BY Clause
Affected: < 2025.81
CVE-2026-25514
8.8
1%
Feb 4
FacturaScripts has SQL Injection vulnerability in Autocomplete Actions
Affected: < 2025.81
CVE-2026-104905
8.1
1%
Oct 5
FacturaScripts < 2026.7 PHP Object Injection via WidgetSelect
Affected: 2025.7 before 2026.7
CVE-2026-27891
7.2
1%
May 18
Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism
Affected: < 2026.1
CVE-2026-27892
6.5
0%
May 18
FacturaScripts: Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download
Affected: < 2026
CVE-2026-42879
6.3
0%
May 27
FacturaScripts: Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images
Affected: <= 2025.81
CVE-2026-42877
5.4
0%
May 27
FacturaScripts: Stored XSS via product reference in sales/purchases
Affected: <= 2025.92
CVE-2026-23476
5.4
0%
Feb 2
FacturaScripts Affected by Reflected XSS
Affected: < 2025.8
CVE-2025-69210
5.4
1%
Dec 30
FacturaScripts vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload
Affected: < 2025.7
CVE-2026-42878
5.3
1%
May 27
FacturaScripts: Unauthenticated phpinfo() Disclosure via Installer Endpoint in FacturaScripts
Affected: < v2026
CVE-2026-32699
5.3
0%
May 5
FacturaScripts unauthorized modification of immutable nick field via EditUser controller
Affected: <= 2025.92
CVE-2026-27964
3.9
0%
May 18
FacturaScripts: Reflected Cross-Site Scripting (XSS) via Cookie Manipulation
Affected: < 2025.8
Showing 13