CVE-2026-108059

A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...

CVE-2026-108059

A stored Cross-Site Scripting (XSS) vulnerability exists in the Alosuite software, specifically affecting the delivery note functionality . The flaw is caused by insufficient sanitization and encoding of the Observaciones field in the /Terceros/Create endpoint. An authenticated attacker can store...

CVE-2026-108059 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...

CVE-2026-5700

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in...

CVE-2026-5700 Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in...

CVE-2026-5700

The SABBATIC application contains a Stored Cross-Site Scripting (XSS) vulnerability (CWE-79). This flaw allows an attacker to inject and store malicious JavaScript code via the 'observaciones' parameter in the /mis-gastos endpoint. When a victim views the affected page, the script executes in the...

EUVD-2026-112742

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in...

CVE-2026-5700 Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in...

SABBATIC app cross-site scripting vulnerability

Versions prior to 7.96.0.1 and 7.96.0.2 of the SABBATIC app contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of input in the “observaciones” parameter on the /mis-gastos endpoint, potentially allowing stored cross-site scripting attacks. Attackers can...

CVE-2026-5700: SABBATIC SABBATIC app: Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript…

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in...

PT-2026-132095

Stored Cross-Site Scripting XSS vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in...