Threats tagged 'ghsa-gq5c-rw37-g46c'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.9	EPSS 0.1%	CVE-2026-27964facturascripts/facturascripts · FacturaScripts vulnerable to Reflected Cross-Site Scripting (XSS) via Cookie Manipulation Low3.9EPSS 0.1%2026-05-07GCVE DatabaseCVE-2026-27964 FacturaScripts contains a reflected cross-site scripting (XSS) vulnerability via the fsNick cookie parameter. The application reflects the cookie's value into the HTML DOM without proper encoding, allowing script execution before the server invalidates the session and forces logout. This can enable a single unauthorized action before logout occurs. EPSS 0.1%Report on CVE-2026-27964 Vulnerability CWE-79 #ghsa-gq5c-rw37-g46c #packagist	GCVE Database	2026-05-07

Page 1 of 1