Security Advisory

CVE-2022-1682

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-05-12 08:15:17
Last updated 2024-08-03 00:10:03
Assigner @huntrdev
CVSS score 9.4
State PUBLISHED

Description

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser