[facturascripts/facturascripts] Cross site scripting in FacturaScripts

FacturaScripts prior to version 2022.06 is vulnerable to stored cross-site scripting via upload plugin functionality in zip format.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-1514
• https://github.com/neorazorx/facturascripts/commit/aa9f28cb86467468f43486b77ddef7ff4d3c687e
• https://huntr.dev/bounties/4ae2a917-843a-4ae4-8197-8425a596761c
• https://github.com/advisories/GHSA-p3w3-4ppm-c3f6