NeoRazorX facturascripts vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202612

Newest CVEs

• CVE-2026-104905

  FacturaScripts < 2026.7 PHP Object Injection via WidgetSelect

  NeoRazorX · facturascripts

  Medium6.1
• CVE-2026-42877

  FacturaScripts: Stored XSS via product reference in sales/purchases

  NeoRazorX · facturascripts

  Medium5.4
• CVE-2026-42879

  FacturaScripts: Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images

  NeoRazorX · facturascripts

  Medium6.3
• CVE-2026-42878

  FacturaScripts: Unauthenticated phpinfo() Disclosure via Installer Endpoint in FacturaScripts

  NeoRazorX · facturascripts

  Medium5.3
• CVE-2026-27964

  FacturaScripts: Reflected Cross-Site Scripting (XSS) via Cookie Manipulation

  NeoRazorX · facturascripts

  Low3.9
• CVE-2026-27892

  FacturaScripts: Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download

  NeoRazorX · facturascripts

  Medium6.5
• CVE-2026-27891

  Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism

  NeoRazorX · facturascripts

  High7.2
• CVE-2026-32699

  FacturaScripts unauthorized modification of immutable nick field via EditUser controller

  NeoRazorX · facturascripts

  Medium5.3
• CVE-2026-25513

  FacturaScripts has SQL Injection vulnerability in API ORDER BY Clause

  NeoRazorX · facturascripts

  High8.3
• CVE-2026-25514

  FacturaScripts has SQL Injection vulnerability in Autocomplete Actions

  NeoRazorX · facturascripts

  High8.7