-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| facturascripts/facturascripts | composer | <= 2022.08 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper input sanitization order in the test() method. The patch moved the noHtml() sanitization call to execute before any validation checks, ensuring 'descripcion' is always sanitized. This indicates the original implementation allowed unsanitized input to persist when early validation checks failed, creating an XSS vector. The direct code modification in the commit and added unit test for HTML escaping confirm this as the root cause.
PHPPHPOngoing coverage of React2Shell