Stored Cross-Site Scripting Vulnerability in Alosuite Delivery Note Functionality

CVE-2026-108050

What is CVE-2026-108050?

A stored Cross-Site Scripting (XSS) vulnerability exists in Alosuite's delivery note functionality due to insufficient sanitization and encoding of input fields. This flaw permits the storage of JavaScript code, which can execute in the browsers of other users viewing the affected records. Exploiting this vulnerability requires authenticated access, allowing attackers to manipulate displayed content and perform actions within the victim’s session context. It is crucial for users of Alosuite to apply security measures to safeguard against potential exploitation.

References