CVE-2022-1457 CRITICAL

CVE-2022-1457: Store XSS in title parameter executing at EditUser Page & EditProducto page in neorazorx/facturascripts

Vendor Neorazorx
Product neorazorx/facturascripts
Weakness CWE-79 · XSS
Published April 25, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

9.0/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascripts prior to 2022.04. Cross-site scripting attacks can have devastating consequences. Code injected into a vulnerable application can exfiltrate data or install malware on the user's machine. Attackers can masquerade as authorized users via session cookies, allowing them to perform any action allowed by the user account.

Key dates

02Disclosure timeline

April 25, 2022 CVE published
August 3, 2024 Record updated