MEDIUMCVSS v4 5.1Vulnerability
CVE-2026-108060
A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation requires authenticated access to the affected functionality. The code can alter the displayed content and perform actions within the context of the victim’s session. The list of features, parameters, and endpoints is as follows:CVE-2026-108060: Nombre in ‘/Trabajadores/Create’.
Properties
- Cvss score
- 5.1
- First seen
- 2026-11-03T12:26:57+00:00
- Last seen
- 2026-11-03T12:26:57+00:00
- Euvd assigner
- INCIBE
- Retrieved at
- 2026-11-03T17:21:18+00:00
- Src batch id
- euvd-20261103T133401Z-c6d8e5
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115809
- Score
- 5.1
- Euvd base score version
- 4.0
- Fetched at
- 2026-11-03T13:34:21+00:00
- Euvd vendor
- AM System
- Cvss vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- First seen by Signal
- 2026-11-03T13:34:21+00:00
- Euvd base score
- 5.1
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Content hash
- c08897ed3159022c6fab322905dae9429d0117c622ae2598946c217f3d578359
- Published at
- 2026-11-03T13:17:19.277
- Last modified
- 2026-11-03T16:16:21.777
- Euvd updated
- 2026-11-03T12:26:57+00:00
- Euvd epss pct
- 0
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph