TI-2026-19336 CVE-2026-23997 · GHSA-4v7v-7v7r-3r5h
FacturaScripts has a Stored Cross-Site Scripting (XSS) in "Observations" field via History View
Priority HIGH 74
FacturaScripts is open-source enterprise resource planning and accounting software.
NeoRazorX
Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
NeoRazorX records in CISA KEVNo NeoRazorX vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
14 records in Facturascripts · all components
TI-2022-01581 CVE-2022-1715 · GHSA-vjq3-x3f2-fvxq
Account Takeover in neorazorx/facturascripts
Priority MEDIUM 45
Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07.
TI-2026-20624 CVE-2026-25514 · GHSA-pqqg-5f4f-8952
FacturaScripts has SQL Injection vulnerability in Autocomplete Actions
Priority MEDIUM 40
FacturaScripts is open-source enterprise resource planning and accounting software.
TI-2026-20623 CVE-2026-25513 · GHSA-cjfx-qhwm-hf99
FacturaScripts has SQL Injection vulnerability in API ORDER BY Clause
Priority LOW 37
FacturaScripts is open-source enterprise resource planning and accounting software.
TI-2022-01913 CVE-2022-2066 · GHSA-h6wm-mr85-4h9g
Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Priority LOW 29
Cross-site Scripting (XSS) - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06.
TI-2022-01843 CVE-2022-1988 · GHSA-r7jw-mg27-j839
Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts
Priority LOW 29
Cross-site Scripting (XSS) - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09.
TI-2022-01550 CVE-2022-1682 · GHSA-6465-r752-2h8v
Reflected Xss using url based payload in neorazorx/facturascripts
Priority LOW 29
Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07.
TI-2022-01442 CVE-2022-1571 · GHSA-m8gv-gvhf-7rhp
Cross-site scripting - Reflected in Create Subaccount in neorazorx/facturascripts
Priority LOW 29
Cross-site scripting - Reflected in Create Subaccount in GitHub repository neorazorx/facturascripts prior to 2022.07.
TI-2022-01912 CVE-2022-2065 · GHSA-fp76-f299-v3hj
Cross-site Scripting (XSS) - Stored in neorazorx/facturascripts
Priority LOW 26
Cross-site Scripting (XSS) - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06.
TI-2022-01869 CVE-2022-2016 · GHSA-j8c7-3jpq-8985
Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Priority LOW 26
Cross-site Scripting (XSS) - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1.
TI-2022-01387 CVE-2022-1514 · GHSA-p3w3-4ppm-c3f6
Stored XSS via upload plugin functionality in zip format in neorazorx/facturascripts
Priority LOW 26
Stored XSS via upload plugin functionality in zip format in GitHub repository neorazorx/facturascripts prior to 2022.06.
TI-2022-01331 CVE-2022-1457 · GHSA-8wp2-vxpg-xcvp
Store XSS in title parameter executing at EditUser Page & EditProducto page in neorazorx/facturascripts
Priority LOW 26
Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascripts prior to 2022.04.
TI-2026-18909 CVE-2026-23476 · GHSA-g6w2-q45f-xrp4
FacturaScripts Affected by Reflected XSS
Priority LOW 24
FacturaScripts is open-source enterprise resource planning and accounting software.
TI-2025-42664 CVE-2025-69210 · GHSA-2267-xqcf-gw2m
FacturaScripts vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload
Priority LOW 10
FacturaScripts is open-source enterprise resource planning and accounting software.