by Kastro
Paper/Archive/CVE-2022-1682

CVE-2022-1682

neorazorx neorazorx/facturascripts — Reflected Xss using url based payload in neorazorx/facturascripts

EPSS 0.8%CVSS 9.4
critical.is priorityof 100
39
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 55.2.552 × 2011.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser

Affected

ProductAffectedFixed inSource
neorazorx/facturascriptsunspecified – < 2022.072022.07CNA

Scores by source

@huntrdev (CNA)9.4CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

References

refhuntr.dev/bounties/e962d191-93e2-405e-a6af-b4a4e4d02527refgithub.com/neorazorx/facturascripts/commit/8e31d8434014a6d1e8791a489d84268fd74b0c9a