tocsin

CVE-2026-25513

1 advisory.

Packagist/facturascripts/facturascripts CVE-2026-25513: high, EPSS 0.57%

FacturaScripts has SQL Injection in API ORDER BY Clause

Action: Upgrade facturascripts/facturascripts to 2025.81 or later.

composer require facturascripts/facturascripts:2025.81

Affected

introducedfixedlast affected
02025.81-

Fixed versions

2025.81

Sources

CVE-2026-25513 · published · modified · JSON