PkgSeer

Vulnerabilities

Last updated 3 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
facturascripts/facturascripts FacturaScripts vulnerable to Reflected Cross-Site Scripting (XSS) via Cookie Manipulation Low Risk 3.9 5 months ago 13 hours ago
facturascripts/facturascripts FacturaScripts Vulnerable to Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download Medium Risk 6.5 5 months ago 13 hours ago
facturascripts/facturascripts FacturaScripts Vulnerable to Unauthenticated phpinfo() Disclosure via Installer Endpoint Medium Risk 5.3 5 months ago 1 month ago
facturascripts/facturascripts FacturaScripts vulnerable to stored XSS via product reference in sales/purchases Medium Risk 5.4 5 months ago 1 month ago
facturascripts/facturascripts FacturaScripts Vulnerable to Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images Medium Risk 6.3 5 months ago 1 month ago
facturascripts/facturascripts FacturaScripts: Stored XSS in WidgetVariante and WidgetSubcuenta modal lists via HTML-attribute decoding of `Tools::noHtml`-escaped quotes inside `onclick=` Low Risk 3.5 3 months ago 3 months ago
facturascripts/facturascripts FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCE Critical 9.9 3 months ago 3 months ago
facturascripts/facturascripts FacturaScripts: CSV formula injection in CSVExport allows authenticated low-priv users to plant payloads that execute when an admin opens the export High Risk 8.0 3 months ago 3 months ago
facturascripts/facturascripts FacturaScripts: Unauthenticated Path Traversal in Static File Controllers Reads Private MyFiles Documents High Risk 7.5 3 months ago 3 months ago
facturascripts/facturascripts FacturaScripts: Authenticated SQL injection in the FacturaScripts REST API filter parameter via parenthesis bypass in `Where::sqlColumn` Critical 9.9 3 months ago 3 months ago
facturascripts/facturascripts FacturaScripts: Account takeover of any 2FA-enabled user Critical 9.5 3 months ago 3 months ago
facturascripts/facturascripts FacturaScripts Vulnerable to Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism High Risk 7.2 5 months ago 5 months ago
facturascripts/facturascripts FacturaScripts has Insecure Parameter Handling: Unauthorized Modification of Immutable 'nick' Field Medium Risk 4.3 6 months ago 5 months ago
facturascripts/facturascripts FacturaScripts has SQL Injection in API ORDER BY Clause High Risk 8.0 8 months ago 8 months ago
facturascripts/facturascripts FacturaScripts has SQL Injection in Autocomplete Actions High Risk 8.0 8 months ago 8 months ago
facturascripts/facturascripts FacturaScripts is Vulnerable to Reflected XSS Medium Risk 5.4 9 months ago 8 months ago
facturascripts/facturascripts FacturaScripts has Stored Cross-Site Scripting (XSS) in "Observations" field via History View High Risk 8.0 9 months ago 8 months ago
facturascripts/facturascripts FacturaScripts is Vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload High Risk 8.0 10 months ago 9 months ago
facturascripts/facturascripts Cross-site Scripting in FacturaScripts Medium Risk 5.4 4 years ago 2 years ago
facturascripts/facturascripts Cross site scripting in facturascripts Medium Risk 6.1 4 years ago 2 years ago
facturascripts/facturascripts Cross-site Scripting in FacturaScripts Medium Risk 5.4 4 years ago 2 years ago
facturascripts/facturascripts Cross-site Scripting in FacturaScripts Medium Risk 6.5 4 years ago 2 years ago
facturascripts/facturascripts Cross-site Scripting in facturascripts Medium Risk 6.1 4 years ago 2 years ago
facturascripts/facturascripts Cross-site Scripting in FacturaScripts Medium Risk 6.1 4 years ago 2 years ago
facturascripts/facturascripts Account takeover in facturascripts Critical 9.8 4 years ago 2 years ago
facturascripts/facturascripts Cross site scripting in FacturaScripts Critical 9.0 4 years ago 2 years ago
Data courtesy of OSV.dev
Page 1