FacturaScripts: Stored XSS in WidgetVariante and WidgetSubcuenta modal lists via HTML-attribute decoding of `Tools::noHtml`-escaped quotes inside `onclick=` · CVE-2026-45710 · GitHub Advisory Database · GitHub

FacturaScripts: Stored XSS in WidgetVariante and WidgetSubcuenta modal lists via HTML-attribute decoding of `Tools::noHtml`-escaped quotes inside `onclick=`

Low severity GitHub Reviewed Published Jul 14, 2026 in NeoRazorX/facturascripts

0 Open 0 Closed

No open alerts for this advisory

Give feedback on Dependabot alerts