github.com
https://github.com/neorazorx/facturascripts CVE-2022-2016
MEDIUM
Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Record summary
CVE-2022-2016 has a selected CVSS score of 5.4 (medium).
Description
Cross-site Scripting (XSS) - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1.
Description source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
neorazorx/facturascriptsBrowse neorazorx / neorazorx/facturascripts | CVE List | Before 2022.1 | affected |
facturascripts/facturascriptsBrowse Packagist / facturascripts/facturascripts | GitHub Advisory | Through 2022.08 | affected |
References
4github.com
https://github.com/neorazorx/facturascripts/commit/7b4ddb9269a230e2dd07c6a8d3211c9a88f4f09f huntr.devConfirmation
https://huntr.dev/bounties/5fa17e9b-c767-46b4-af64-aafb8c2aa521 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-2016