CVE-2026-1960

Stored Cross-Site Scripting XSS vulnerability in Loggro Pymes, via the 'Facebook' parameter in '/loggrodemo/jbrain/ConsultaTerceros' endpoint...

CVE-2026-1960

A Stored Cross-Site Scripting (XSS) vulnerability affects Loggro Pymes, exploitable via the Facebook parameter in the /loggrodemo/jbrain/ConsultaTerceros endpoint. The CVE-2026-1960 description (Loggro Pymes) confirms the issue and shows a CVSS v4.0 base score of 5.1 (MEDIUM) with Network attack ...