Threats tagged 'ghsa-fghv-6j2v-vmqh'

A stored Cross-Site Scripting (XSS) vulnerability exists in Alosuite's delivery note functionality, specifically in the NombrePF parameter of the '/Empresas/Create' endpoint. This flaw allows authenticated users to inject JavaScript code that is stored and later executed in other users' browsers when viewing the affected records. The vulnerability arises from insufficient sanitization and encoding of input fields.