Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FacturaScripts is open-source enterprise resource planning and accounting software. In 2025.71 and earlier, a Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Observations field. The flaw occurs in the History view, where historical data is rendered without proper HTML entity encoding. This allows an attacker to execute arbitrary JavaScript in the browser of viewing the history by administrators.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-23997 Stored XSS Vulnerability in FacturaScripts 2025.71 Enterprise Resource Planning Software https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23997
Post summary
A stored XSS vulnerability (CVE-2026-23997) has been identified in FacturaScripts 2025.71, with no publicly available exploit, patch, or active exploitation details provided.
CVE-2026-23997 FacturaScripts is open-source enterprise resource planning and accounting software. In 2025.71 and earlier, a Stored Cross-Site Scripting (XSS) vulnerability was disc… https://www.cve.org/CVERecord?id=CVE-2026-23997
Post summary
The post references CVE‑2026‑23997, noting a stored XSS flaw affecting FacturaScripts versions 2025.71 and earlier, but provides no PoC, exploit code, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | facturascripts | facturascripts | - | - | - |