CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-23476

FacturaScripts is open-source enterprise resource planning and accounting software. Prior to 2025.8, there a reflected XSS bug in FacturaScripts. The problem is in how error messages get displayed. Twig's | raw filter is used, which skips HTML escaping. When triggering a database error (like passing a string where an integer is expected), the error message includes the input and gets rendered without sanitization. This vulnerability is fixed in 2025.8.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 1.0%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2026-23476

Facturascripts » Facturascripts » Version: N/A

cpe:2.3:a:facturascripts:facturascripts:-
Facturascripts » Facturascripts » Version: 2018.03

cpe:2.3:a:facturascripts:facturascripts:2018.03
Facturascripts » Facturascripts » Version: 2018.04

cpe:2.3:a:facturascripts:facturascripts:2018.04
Facturascripts » Facturascripts » Version: 2018.05

cpe:2.3:a:facturascripts:facturascripts:2018.05
Facturascripts » Facturascripts » Version: 2018.11

cpe:2.3:a:facturascripts:facturascripts:2018.11
Facturascripts » Facturascripts » Version: 2018.12

cpe:2.3:a:facturascripts:facturascripts:2018.12
Facturascripts » Facturascripts » Version: 2018.13

cpe:2.3:a:facturascripts:facturascripts:2018.13
Facturascripts » Facturascripts » Version: 2018.14

cpe:2.3:a:facturascripts:facturascripts:2018.14
Facturascripts » Facturascripts » Version: 2018.15

cpe:2.3:a:facturascripts:facturascripts:2018.15
Facturascripts » Facturascripts » Version: 2018.16

cpe:2.3:a:facturascripts:facturascripts:2018.16
Facturascripts » Facturascripts » Version: 2020.01

cpe:2.3:a:facturascripts:facturascripts:2020.01
Facturascripts » Facturascripts » Version: 2020.2

cpe:2.3:a:facturascripts:facturascripts:2020.2
Facturascripts » Facturascripts » Version: 2020.3

cpe:2.3:a:facturascripts:facturascripts:2020.3
Facturascripts » Facturascripts » Version: 2020.4

cpe:2.3:a:facturascripts:facturascripts:2020.4
Facturascripts » Facturascripts » Version: 2020.51

cpe:2.3:a:facturascripts:facturascripts:2020.51
Facturascripts » Facturascripts » Version: 2020.61

cpe:2.3:a:facturascripts:facturascripts:2020.61
Facturascripts » Facturascripts » Version: 2020.71

cpe:2.3:a:facturascripts:facturascripts:2020.71
Facturascripts » Facturascripts » Version: 2020.80

cpe:2.3:a:facturascripts:facturascripts:2020.80
Facturascripts » Facturascripts » Version: 2021

cpe:2.3:a:facturascripts:facturascripts:2021
Facturascripts » Facturascripts » Version: 2021.1

cpe:2.3:a:facturascripts:facturascripts:2021.1
Facturascripts » Facturascripts » Version: 2021.2

cpe:2.3:a:facturascripts:facturascripts:2021.2
Facturascripts » Facturascripts » Version: 2021.4

cpe:2.3:a:facturascripts:facturascripts:2021.4
Facturascripts » Facturascripts » Version: 2021.51

cpe:2.3:a:facturascripts:facturascripts:2021.51
Facturascripts » Facturascripts » Version: 2021.71

cpe:2.3:a:facturascripts:facturascripts:2021.71
Facturascripts » Facturascripts » Version: 2021.81

cpe:2.3:a:facturascripts:facturascripts:2021.81
Facturascripts » Facturascripts » Version: 2022.06

cpe:2.3:a:facturascripts:facturascripts:2022.06
Facturascripts » Facturascripts » Version: 2022.08

cpe:2.3:a:facturascripts:facturascripts:2022.08
Facturascripts » Facturascripts » Version: 2022.2

cpe:2.3:a:facturascripts:facturascripts:2022.2
Facturascripts » Facturascripts » Version: 2022.4

cpe:2.3:a:facturascripts:facturascripts:2022.4
Facturascripts » Facturascripts » Version: 2022.51

cpe:2.3:a:facturascripts:facturascripts:2022.51
Facturascripts » Facturascripts » Version: 2023.03

cpe:2.3:a:facturascripts:facturascripts:2023.03
Facturascripts » Facturascripts » Version: 2023.08

cpe:2.3:a:facturascripts:facturascripts:2023.08
Facturascripts » Facturascripts » Version: 2023.16

cpe:2.3:a:facturascripts:facturascripts:2023.16
Facturascripts » Facturascripts » Version: 2023.21

cpe:2.3:a:facturascripts:facturascripts:2023.21
Facturascripts » Facturascripts » Version: 2024

cpe:2.3:a:facturascripts:facturascripts:2024
Facturascripts » Facturascripts » Version: 2024.1

cpe:2.3:a:facturascripts:facturascripts:2024.1
Facturascripts » Facturascripts » Version: 2024.2

cpe:2.3:a:facturascripts:facturascripts:2024.2
Facturascripts » Facturascripts » Version: 2024.3

cpe:2.3:a:facturascripts:facturascripts:2024.3
Facturascripts » Facturascripts » Version: 2024.5

cpe:2.3:a:facturascripts:facturascripts:2024.5
Facturascripts » Facturascripts » Version: 2024.7

cpe:2.3:a:facturascripts:facturascripts:2024.7
Facturascripts » Facturascripts » Version: 2024.8

cpe:2.3:a:facturascripts:facturascripts:2024.8
Facturascripts » Facturascripts » Version: 2024.9

cpe:2.3:a:facturascripts:facturascripts:2024.9
Facturascripts » Facturascripts » Version: 2024.91

cpe:2.3:a:facturascripts:facturascripts:2024.91
Facturascripts » Facturascripts » Version: 2024.93

cpe:2.3:a:facturascripts:facturascripts:2024.93
Facturascripts » Facturascripts » Version: 2024.94

cpe:2.3:a:facturascripts:facturascripts:2024.94
Facturascripts » Facturascripts » Version: 2024.95

cpe:2.3:a:facturascripts:facturascripts:2024.95
Facturascripts » Facturascripts » Version: 2024.96

cpe:2.3:a:facturascripts:facturascripts:2024.96
Facturascripts » Facturascripts » Version: 2025

cpe:2.3:a:facturascripts:facturascripts:2025
Facturascripts » Facturascripts » Version: 2025.2

cpe:2.3:a:facturascripts:facturascripts:2025.2
Facturascripts » Facturascripts » Version: 2025.3

cpe:2.3:a:facturascripts:facturascripts:2025.3
Facturascripts » Facturascripts » Version: 2025.4

cpe:2.3:a:facturascripts:facturascripts:2025.4
Facturascripts » Facturascripts » Version: 2025.7

cpe:2.3:a:facturascripts:facturascripts:2025.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-23476

Products

Pricing

Contact Us