Threats tagged 'ghsa-mm79-g99g-7ff5'

CVE-2026-108051 is a stored Cross-Site Scripting (XSS) vulnerability in Alosuite affecting the delivery note functionality. The vulnerability arises from insufficient sanitization and encoding of input fields, allowing JavaScript code to be stored and executed in other users' browsers when viewing affected records. Exploitation requires authenticated access. The vulnerability can alter displayed content and perform actions within the victim's session context. No patch or remediation information is currently provided.