Known vulnerabilities in FacturaScripts

Vendor: Carlos Garcia
Software: FacturaScripts
Software CPE: cpe:2.3:a:carlos_garcia:facturascripts:*:*:*:*:*:*:*:*
Website: https://github.com/NeoRazorX
Total vulnerabilities: 7
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FacturaScripts FacturaScripts is affected by 7 known vulnerabilities: 2 medium, 5 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128314 - Improper Access Control
CVE-2026-32699		 CWE-284 Low
No
No
 2026 28.04.2026 SB2026042853
#VU122430 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-25513		 CWE-89 Medium
Available
No
 2025.81 06.02.2026 SB2026020639
#VU122429 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-25514		 CWE-89 Medium
Available
No
 2025.81 06.02.2026 SB2026020639
#VU122255 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-23997		 CWE-79 Low
Available
No
 2025.81 03.02.2026 SB2026020336
#VU122254 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-23476		 CWE-79 Low
No
No
 2025.81 03.02.2026 SB2026020336
#VU121086 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-69210		 CWE-79 Low
No
No
 2025.7 08.01.2026 SB2026010813
#VU64187 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-2016		 CWE-79 Low
No
No
 2022.1 10.06.2022 SB2022061017