Back to Database
Status published
Critical
CVE-2022-1682
Reflected Xss using url based payload in neorazorx/facturascripts
Vulnerability Description
Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1682
Credits & Attribution
No credits recorded in the NVD database.
References
More from neorazorx
View All →CVE-2022-2066
Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
High
7.1
CVE-2022-2065
Cross-site Scripting (XSS) - Stored in neorazorx/facturascripts
High
8.6
CVE-2022-2016
Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Medium
6.8
CVE-2022-1988
Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts
Medium
6.5
CVE-2022-1715
Account Takeover in neorazorx/facturascripts
Critical
9.8
Affected Vendor
neorazorx
View all reports →Affected Software
neorazorx/facturascripts
Vulnerable Versions:
unspecified
Timeline
Official Publish:
May 12th, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L