Login Request a demo
FA
Product
facturascripts
by NeoRazorX · last CVE Oct 5, 2026
13
CVEs
0
On KEV
9.0
Max CVSS
1
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 1High 4Medium 7Low 1
Severity
All severities13Critical1High4Medium7Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add facturascripts to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27892
6.5
0%
May 18
FacturaScripts: Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download
Affected: < 2026
CVE-2026-42879
6.3
0%
May 27
FacturaScripts: Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images
Affected: <= 2025.81
CVE-2026-42877
5.4
0%
May 27
FacturaScripts: Stored XSS via product reference in sales/purchases
Affected: <= 2025.92
CVE-2026-23476
5.4
0%
Feb 2
FacturaScripts Affected by Reflected XSS
Affected: < 2025.8
CVE-2025-69210
5.4
1%
Dec 30
FacturaScripts vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload
Affected: < 2025.7
CVE-2026-42878
5.3
1%
May 27
FacturaScripts: Unauthenticated phpinfo() Disclosure via Installer Endpoint in FacturaScripts
Affected: < v2026
CVE-2026-32699
5.3
0%
May 5
FacturaScripts unauthorized modification of immutable nick field via EditUser controller
Affected: <= 2025.92
Showing 7