4 matches found
CVE-2026-108050
A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...
CVE-2026-108050
A stored Cross-Site Scripting (XSS) vulnerability exists in Alosuite within the delivery note functionality . The root cause is insufficient sanitization and encoding of the ReferenceOtherParty parameter in the /Documents/DeliveryNotes/Edit/{id} endpoint. An authenticated attacker can store malic...
EUVD-2026-115799
A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...
CVE-2026-108050 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...