Threat database

CVE-2026-59662 is a medium severity Cross-Site Scripting (XSS) vulnerability in the Repasat application. The vulnerability affects the 'nomCompetidor' parameter at the '/es/competitors/store' endpoint. Exploitation could allow an attacker to execute arbitrary code in a victim's browser by tricking the user into interacting with malicious input. The vulnerability has a CVSS 4.8 score indicating moderate impact. No patch or remediation information is currently provided.

CVE-2026-59664 is a medium severity Cross-Site Scripting (XSS) vulnerability in the Repasat application. The vulnerability affects the 'nomServicioPrestado' parameter at the '/es/providedservices/store' endpoint. Exploitation could allow an attacker to execute arbitrary code in a victim's browser by tricking the user into interacting with malicious content.

CVE-2026-59663 is a medium severity Cross-Site Scripting (XSS) vulnerability in the Repasat application. The vulnerability affects the 'nomDelegacion' parameter at the '/es/delegations/store' endpoint. Exploitation could allow an attacker to execute arbitrary code in a victim's browser by tricking the user. The vulnerability has a CVSS 4.8 score indicating moderate risk. No patch or remediation information is currently provided.

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomCompetidor” parameter is affected – endpoint “/es/competitors/store”.

CVE-2026-59661 is a medium severity Cross-Site Scripting (XSS) vulnerability in the Repasat application. It affects the 'nomRuta' parameter at the '/es/routes/update/693' endpoint. Exploitation could allow an attacker to execute arbitrary code in a victim's browser by tricking the user. No affected versions or patch information are provided.

CVE-2026-59660 is a Cross-Site Scripting (XSS) vulnerability in the Repasat application affecting the 'nomTransportista' parameter at the '/es/carriers/update' endpoint. This flaw allows an attacker to execute arbitrary code in a victim's browser by tricking the user. The vulnerability has a medium severity score of 4.8. No patch or remediation information is currently available from the vendor.

CVE-2026-59659 is a medium severity Cross-Site Scripting (XSS) vulnerability in the Repasat application. It affects the 'nomZonaGeo' parameter at the '/es/geozones/update/149979' endpoint. This flaw allows attackers to inject malicious scripts that could execute in users' browsers. No patch or remediation information is currently available.

CVE-2026-59671 is a Cross-Site Scripting (XSS) vulnerability in the Repasat application affecting the endpoint /es/datatables/getemployeetypesdatatable. This vulnerability allows an attacker to trick a user into executing arbitrary code in their browser. The vulnerability has a medium severity rating with a CVSS score of 4.8. No patch or official fix information is currently available.

CVE-2026-59670 is a medium severity Cross-Site Scripting (XSS) vulnerability in the Repasat application. The vulnerability affects the 'nomListaValidacion' parameter at the endpoint '/es/validationslists/assignList/Employee/45659'. Exploitation could allow an attacker to execute arbitrary code in a victim's browser by tricking the user. The CVSS 4.0 base score is 4.8, reflecting network attack vector, low privileges required, and user interaction needed.

CVE-2026-59669 is a Cross-Site Scripting (XSS) vulnerability in the Repasat application affecting the 'name' parameter at the endpoint '/es/attachmenttypes/update/203336'. Exploitation could allow an attacker to execute arbitrary code in a victim's browser. The vulnerability has a medium severity with a CVSS 4.8 score. No patch or official remediation information is currently available.