CVE-2022-1682: Facturascripts

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser

Affected products

• Facturascripts Facturascripts: before 2022.07 (fixed in 2022.07)

Published 2022-05-12. Last modified 2026-06-17.