Beveiligingsadvies

CVE-2026-23476

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-02 20:49:05

Laatst bijgewerkt 2026-02-03 15:33:51

Toegewezen door GitHub_M

CVSS-score 5.4

Status PUBLISHED

Beschrijving

FacturaScripts is open-source enterprise resource planning and accounting software. Prior to 2025.8, there a reflected XSS bug in FacturaScripts. The problem is in how error messages get displayed. Twig's | raw filter is used, which skips HTML escaping. When triggering a database error (like passing a string where an integer is expected), the error message includes the input and gets rendered without sanitization. This vulnerability is fixed in 2025.8.

← Alle CVE's bekijken Bekijk op cve.org ↗