facturascripts records

14 published records for vendor facturascripts.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 78.6%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

14 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2022-1715No exploit	Account Takeover in neorazorx/facturascriptsfacturascripts · facturascripts · CWE-1125 Pre-auth	Critical9.8	—	1.4%	May 13, 2022
36Monitor	CVE-2026-23997No exploit	FacturaScripts has a Stored Cross-Site Scripting (XSS) in "Observations" field via History Viewfacturascripts · facturascripts · CWE-79 RCE XSS	Critical9.0	—	0.4%	Feb 2, 2026
34Monitor	CVE-2026-25514Proof of concept	FacturaScripts has SQL Injection vulnerability in Autocomplete Actionsfacturascripts · facturascripts · CWE-20 SQL injection	High8.7	—	0.5%	Feb 4, 2026
33Monitor	CVE-2026-25513Proof of concept	FacturaScripts has SQL Injection vulnerability in API ORDER BY Clausefacturascripts · facturascripts · CWE-20 RCE SQL injection	High8.3	—	0.5%	Feb 4, 2026
24Monitor	CVE-2022-2066No exploit	Cross-site Scripting (XSS) - Reflected in neorazorx/facturascriptsfacturascripts · facturascripts · CWE-79 Pre-auth XSS	Medium6.1	—	1.0%	Jun 13, 2022
24Monitor	CVE-2022-1571No exploit	Cross-site scripting - Reflected in Create Subaccount in neorazorx/facturascriptsfacturascripts · facturascripts · CWE-79 Pre-auth XSS	Medium6.1	—	0.9%	May 4, 2022
24Monitor	CVE-2022-1988No exploit	Cross-site Scripting (XSS) - Generic in neorazorx/facturascriptsfacturascripts · facturascripts · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Jun 3, 2022
24Monitor	CVE-2022-1682No exploit	Reflected Xss using url based payload in neorazorx/facturascriptsfacturascripts · facturascripts · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	May 12, 2022
21Monitor	CVE-2022-1514No exploit	Stored XSS via upload plugin functionality in zip format in neorazorx/facturascriptsfacturascripts · facturascripts · CWE-79 XSS	Medium5.4	—	0.8%	Apr 28, 2022
21Monitor	CVE-2022-1457No exploit	Store XSS in title parameter executing at EditUser Page & EditProducto page in neorazorx/facturascriptsfacturascripts · facturascripts · CWE-79 XSS	Medium5.4	—	0.8%	Apr 25, 2022
21Monitor	CVE-2022-2065No exploit	Cross-site Scripting (XSS) - Stored in neorazorx/facturascriptsfacturascripts · facturascripts · CWE-79 XSS	Medium5.4	—	0.7%	Jun 13, 2022
21Monitor	CVE-2022-2016No exploit	Cross-site Scripting (XSS) - Reflected in neorazorx/facturascriptsfacturascripts · facturascripts · CWE-79 XSS	Medium5.4	—	0.7%	Jun 9, 2022
21Monitor	CVE-2026-23476No exploit	FacturaScripts Affected by Reflected XSSfacturascripts · facturascripts · CWE-79 XSS	Medium5.4	—	0.3%	Feb 2, 2026
4Monitor	CVE-2025-69210Proof of concept	FacturaScripts vulnerable to Stored Cross-Site Scripting (XSS) via XML File Uploadfacturascripts · facturascripts · CWE-79 XSS	Low1.2	—	1.0%	Dec 30, 2025

CVE-2022-1715
39Monitor
Account Takeover in neorazorx/facturascripts
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
facturascripts · facturascriptsMay 13, 2022
CVE-2026-23997
36Monitor
FacturaScripts has a Stored Cross-Site Scripting (XSS) in "Observations" field via History View
CriticalCVSS 9.0No exploitEPSS 0%
- RCE
- XSS
facturascripts · facturascriptsFeb 2, 2026
CVE-2026-25514
34Monitor
FacturaScripts has SQL Injection vulnerability in Autocomplete Actions
HighCVSS 8.7Proof of conceptEPSS 1%
- SQL injection
facturascripts · facturascriptsFeb 4, 2026
CVE-2026-25513
33Monitor
FacturaScripts has SQL Injection vulnerability in API ORDER BY Clause
HighCVSS 8.3Proof of conceptEPSS 1%
- RCE
- SQL injection
facturascripts · facturascriptsFeb 4, 2026
CVE-2022-2066
24Monitor
Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
facturascripts · facturascriptsJun 13, 2022
CVE-2022-1571
24Monitor
Cross-site scripting - Reflected in Create Subaccount in neorazorx/facturascripts
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
facturascripts · facturascriptsMay 4, 2022
CVE-2022-1988
24Monitor
Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
facturascripts · facturascriptsJun 3, 2022
CVE-2022-1682
24Monitor
Reflected Xss using url based payload in neorazorx/facturascripts
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
facturascripts · facturascriptsMay 12, 2022
CVE-2022-1514
21Monitor
Stored XSS via upload plugin functionality in zip format in neorazorx/facturascripts
MediumCVSS 5.4No exploitEPSS 1%
- XSS
facturascripts · facturascriptsApr 28, 2022
CVE-2022-1457
21Monitor
Store XSS in title parameter executing at EditUser Page & EditProducto page in neorazorx/facturascripts
MediumCVSS 5.4No exploitEPSS 1%
- XSS
facturascripts · facturascriptsApr 25, 2022
CVE-2022-2065
21Monitor
Cross-site Scripting (XSS) - Stored in neorazorx/facturascripts
MediumCVSS 5.4No exploitEPSS 1%
- XSS
facturascripts · facturascriptsJun 13, 2022
CVE-2022-2016
21Monitor
Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
MediumCVSS 5.4No exploitEPSS 1%
- XSS
facturascripts · facturascriptsJun 9, 2022
CVE-2026-23476
21Monitor
FacturaScripts Affected by Reflected XSS
MediumCVSS 5.4No exploitEPSS 0%
- XSS
facturascripts · facturascriptsFeb 2, 2026
CVE-2025-69210
4Monitor
FacturaScripts vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload
LowCVSS 1.2Proof of conceptEPSS 1%
- XSS
facturascripts · facturascriptsDec 30, 2025