Stored Cross-Site Scripting Vulnerability in Alosuite by AM Systems

CVE-2026-108053

What is CVE-2026-108053?

A stored Cross-Site Scripting (XSS) vulnerability has been identified in Alosuite that affects the delivery note functionality. This flaw arises from inadequate sanitization and encoding of user inputs, enabling malicious JavaScript to be stored and executed within the browsers of users who interact with the compromised records. Successful exploitation necessitates authenticated access to the affected features, thereby allowing attackers to manipulate displayed content and execute actions under the session context of the victim.

References