NE
Vendor
NeoRazorX
13
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104905 | FA facturascripts NeoRazorX | 8.1 | Oct 5 | FacturaScripts < 2026.7 PHP Object Injection via WidgetSelect |
| CVE-2026-42877 | FA facturascripts NeoRazorX | 5.4 | May 27 | FacturaScripts: Stored XSS via product reference in sales/purchases |
| CVE-2026-42879 | FA facturascripts NeoRazorX | 6.3 | May 27 | FacturaScripts: Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images |
| CVE-2026-42878 | FA facturascripts NeoRazorX | 5.3 | May 27 | FacturaScripts: Unauthenticated phpinfo() Disclosure via Installer Endpoint in FacturaScripts |
| CVE-2026-27964 | FA facturascripts NeoRazorX | 3.9 | May 18 | FacturaScripts: Reflected Cross-Site Scripting (XSS) via Cookie Manipulation |
| CVE-2026-27892 | FA facturascripts NeoRazorX | 6.5 | May 18 | FacturaScripts: Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download |
| CVE-2026-27891 | FA facturascripts NeoRazorX | 7.2 | May 18 | Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism |
| CVE-2026-32699 | FA facturascripts NeoRazorX | 5.3 | May 5 | FacturaScripts unauthorized modification of immutable nick field via EditUser controller |
| CVE-2026-25513 | FA facturascripts NeoRazorX | 8.8 | Feb 4 | FacturaScripts has SQL Injection vulnerability in API ORDER BY Clause |
| CVE-2026-25514 | FA facturascripts NeoRazorX | 8.8 | Feb 4 | FacturaScripts has SQL Injection vulnerability in Autocomplete Actions |
| CVE-2026-23476 | FA facturascripts NeoRazorX | 5.4 | Feb 2 | FacturaScripts Affected by Reflected XSS |
| CVE-2026-23997 | FA facturascripts NeoRazorX | 9.0 | Feb 2 | FacturaScripts has a Stored Cross-Site Scripting (XSS) in "Observations" field via History View |
| CVE-2025-69210 | FA facturascripts NeoRazorX | 5.4 | Dec 30 | FacturaScripts vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload |