CVE-2026-25514
1 advisory.
Packagist/facturascripts/facturascripts CVE-2026-25514: high
FacturaScripts has SQL Injection in Autocomplete Actions
Action: Upgrade facturascripts/facturascripts to 2025.81 or later.
composer require facturascripts/facturascripts:2025.81Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2025.81 | - |
Fixed versions
| 2025.81 |
Sources
- osv: GHSA-pqqg-5f4f-8952
- https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-pqqg-5f4f-8952
- https://nvd.nist.gov/vuln/detail/CVE-2026-25514
- https://github.com/NeoRazorX/facturascripts/commit/5c070f82665b98efd2f914a4769c6dc9415f5b0f
- https://github.com/NeoRazorX/facturascripts
CVE-2026-25514 · published · modified · JSON