CVE-2026-45263 - FacturaScripts: CSV formula injection in CSVExport allows authenticated low-priv users to plant payloads that execute when an admin opens the export

HIGH

FacturaScripts: CSV formula injection in CSVExport allows authenticated low-priv users to plant payloads that execute when an admin opens the export

Published Jul 14, 2026

8.0

HIGH

CVSS 3.1

FacturaScripts: CSV formula injection in CSVExport allows authenticated low-priv users to plant payloads that execute when an admin opens the export

No remediation recorded yet.

Weaknesses (1)

CWE-1236

Link	Providers	Tags
https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-2p5x-4jr6-x5jg
https://github.com/advisories/GHSA-2p5x-4jr6-x5jg		Advisory

No recorded changes yet.

Sources

Status n/a

Assigner n/a

Published Jul 14, 2026

Updated n/a

Reserved n/a

Updated n/a

Status n/a

Modified n/a

Severity n/a

Public date n/a

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a