github.com
https://github.com/neorazorx/facturascripts CVE-2022-1988
MEDIUM
Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts
Record summary
CVE-2022-1988 has a selected CVSS score of 6.1 (medium).
Description
Cross-site Scripting (XSS) - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09.
Description source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
neorazorx/facturascriptsBrowse neorazorx / neorazorx/facturascripts | CVE List | Before 2022.09 | affected |
facturascripts/facturascriptsBrowse Packagist / facturascripts/facturascripts | GitHub Advisory | Through 2022.08 | affected |
References
4github.com
https://github.com/neorazorx/facturascripts/commit/93fc65ced3847a8e0837561e9fdfa0dbace2cfcb huntr.devConfirmation
https://huntr.dev/bounties/7882a35a-b27e-4d7e-9fcc-e9e009d0b01c nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-1988