Packagist/facturascripts/facturascripts CVE-2025-69210: medium 5.4, EPSS 0.97%

FacturaScripts is Vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload

Action: Upgrade facturascripts/facturascripts to 2025.7 or later.

composer require facturascripts/facturascripts:2025.7

Affected

Fixed versions

Sources

• osv: GHSA-2267-xqcf-gw2m
• nvd: CVE-2025-69210
• https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-2267-xqcf-gw2m
• https://github.com/NeoRazorX/facturascripts/commit/e908ade21c84bdc9d51190057482316730c66146
• https://facturascripts.com/publicaciones/ya-disponible-facturascripts-2025-7
• https://github.com/NeoRazorX/facturascripts
• https://github.com/NeoRazorX/facturascripts/releases/tag/v2025.7

CVE-2025-69210 · published 2025-12-30T20:52:21Z · modified 2026-02-03T03:14:11.581285Z · JSON