https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:49:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-319409 EUVD-2026-319409 https://cve.radiocsirt.org/vuln/euvd-2026-319409 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27964 <p>FacturaScripts is an open source accounting and invoicing software. Versions 2025.7 and prior contain a Reflected Cross-Site Scripting (XSS) vulnerability through the fsNick cookie parameter. The application reflects the cookie&#39;s value directly into the HTML without sanitization. The fsNick cookie is rendered into the DOM without encoding. While the server does reject the modified session and forces a logout, the HTML containing the payload reaches the browser first. This lets the script execute immediately upon load, effectively beating the redirect. This issue has been fixed in version 2025.8.</p> <p>FacturaScripts is an open source accounting and invoicing software. Versions 2025.7 and prior contain a Reflected Cross-Site Scripting (XSS) vulnerability through the fsNick cookie parameter. The application reflects the cookie&#39;s value directly into the HTML without sanitization. The fsNick cookie is rendered into the DOM without encoding. While the server does reject the modified session and forces a logout, the HTML containing the payload reaches the browser first. This lets the script execute immediately upon load, effectively beating the redirect. This issue has been fixed in version 2025.8.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-27964 https://cve.radiocsirt.org/vuln/ghsa-gq5c-rw37-g46c <p><strong>Affected:</strong> Packagist: facturascripts/facturascripts</p> <p>### Summary A Reflected Cross-Site Scripting (XSS) vulnerability exists in the fsNick cookie parameter. The application reflects the cookie&#39;s value directly into the HTML without sanitization.</p> <p>### Details The fsNick cookie is rendered into the DOM without encoding. While the server does reject the modified session and forces a logout, the HTML containing the payload reaches the browser first. This lets the script execute immediately upon load, effectively beating the redirect.</p> <p>### PoC</p> <p>1. Log in to the application with any valid account. &lt;img width=&#34;2078&#34; height=&#34;302&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/d8a9a779-44e0-4a3e-839f-0a031868fbd5&#34; /&gt;</p> <p>2. Capture any the GET request . &lt;img width=&#34;1267&#34; height=&#34;276&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/22e43f73-4f86-4cab-a074-7aba584a71ac&#34; /&gt;</p> <p>3. Modify the value of &#34;fsNick&#34; with the following JavaScript: `&lt;script&gt;alert(window.origin)&lt;/script&gt;`</p> <p>4. Send the modified request. &lt;img width=&#34;1569&#34; height=&#34;319&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/ade88db1-aadc-4c50-9e02-d09888067e98&#34; /&gt;</p> <p>5. Result &lt;img width=&#34;1217&#34; height=&#34;771&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/5858fe9f-127a-4845-b484-5a7ef4ae2cb4&#34; /&gt;</p> <p>### Impact The payload executes before the session ends, which could potentially allow for a single unauthorized action before the logout.</p> <p><strong>Affected:</strong> Packagist: facturascripts/facturascripts</p> <p>### Summary A Reflected Cross-Site Scripting (XSS) vulnerability exists in the fsNick cookie parameter. The application reflects the cookie&#39;s value directly into the HTML without sanitization.</p> <p>### Details The fsNick cookie is rendered into the DOM without encoding. While the server does reject the modified session and forces a logout, the HTML containing the payload reaches the browser first. This lets the script execute immediately upon load, effectively beating the redirect.</p> <p>### PoC</p> <p>1. Log in to the application with any valid account. &lt;img width=&#34;2078&#34; height=&#34;302&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/d8a9a779-44e0-4a3e-839f-0a031868fbd5&#34; /&gt;</p> <p>2. Capture any the GET request . &lt;img width=&#34;1267&#34; height=&#34;276&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/22e43f73-4f86-4cab-a074-7aba584a71ac&#34; /&gt;</p> <p>3. Modify the value of &#34;fsNick&#34; with the following JavaScript: `&lt;script&gt;alert(window.origin)&lt;/script&gt;`</p> <p>4. Send the modified request. &lt;img width=&#34;1569&#34; height=&#34;319&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/ade88db1-aadc-4c50-9e02-d09888067e98&#34; /&gt;</p> <p>5. Result &lt;img width=&#34;1217&#34; height=&#34;771&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/5858fe9f-127a-4845-b484-5a7ef4ae2cb4&#34; /&gt;</p> <p>### Impact The payload executes before the session ends, which could potentially allow for a single unauthorized action before the logout.</p> https://cve.radiocsirt.org/vuln/ghsa-gq5c-rw37-g46c