CVE-2026-108059

A stored Cross-Site Scripting (XSS) vulnerability exists in the Alosuite software, specifically affecting the delivery note functionality . The flaw is caused by insufficient sanitization and encoding of the Observaciones field in the /Terceros/Create endpoint. An authenticated attacker can store...