Cross-site Scripting (XSS)

2022-04-2904:16:31

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

facturascripts

plugin manager

ini parameter

xss

vulnerability

javascript

injection

EPSS

0.001

Percentile

21.4%

JSON

facturascripts/facturascripts is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the ini parameter in the getPluginInfo function of PluginManager.php, allowing an attacker to inject and execute malicious javascript