Threats tagged 'ghsa-h76m-8fwf-5g9f'

CVE-2026-108053 is a stored Cross-Site Scripting (XSS) vulnerability in the Alosuite application affecting the delivery note functionality. The vulnerability arises from insufficient sanitization and encoding of input fields, allowing authenticated users to inject JavaScript code that executes in other users' browsers when viewing affected records. This can alter displayed content and perform actions within the victim's session context. The specific affected parameter is 'Nombre' in the '/CuentasCorrientes/Create' endpoint. The vulnerability has a medium severity rating with a CVSS score of 5.1.