CVE-2022-1571

    Dashboard / Vulnerabilities / CVE-2022-1571

    CVE-2022-1571

    Published: 4 May 2022Last Modified: 12 Aug 2026

    Summary: Cross-site scripting - Reflected in Create Subaccount in neorazorx/facturascripts

    Details: Cross-site scripting - Reflected in Create Subaccount in GitHub repository neorazorx/facturascripts prior to 2022.07. This vulnerability can be arbitrarily executed javascript code to steal user'cookie, perform HTTP request, get content of `same origin` page, etc ...

    References: https://huntr.dev/bounties/4578a690-73e5-4313-840c-ee15e5329741, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1571.json, https://nvd.nist.gov/vuln/detail/CVE-2022-1571, https://github.com/neorazorx/facturascripts/commit/482c5a82b4d79e7a19614f5a67dc24593046cefd

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -482c5a82b4d79e7a19614f5a67dc24593046cefd

    Affected versions

    v2022.06

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-1571 | CVE-DB