CVE-2022-2065

Description

Cross-site Scripting (XSS) - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06.

How to fix CVE-2022-2065

To remediate CVE-2022-2065, upgrade the affected package to a fixed version below.

• Packagist/facturascripts/facturascripts—upgrade to 2022.06 or later

Is CVE-2022-2065 being exploited?

Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 2022.06

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-2065
• PATCHgithub.com/neorazorx/facturascripts
• WEBgithub.com/neorazorx/facturascripts/commit/1d1edb40b40016d7fd2893b410b98569d7facca1
• WEBhuntr.dev/bounties/bcb44da4-d5c9-4830-924f-02d6defe6506