Stored Cross-Site Scripting Vulnerability in Alosuite Affects Delivery Note Functionality

CVE-2026-108051

What is CVE-2026-108051?

A stored Cross-Site Scripting (XSS) vulnerability exists in Alosuite that compromises the delivery note functionality. Due to inadequate sanitization and encoding of user inputs, malicious JavaScript can be stored in specified fields. This JavaScript executes in the browsers of other users upon viewing the impacted records. Successful exploitation requires authenticated access to the delivery note feature, allowing attackers to alter displayed content and initiate actions within the context of victims' sessions.

References