Stored Cross-Site Scripting in Alosuite Delivery Note Functionality

CVE-2026-108055

What is CVE-2026-108055?

A stored Cross-Site Scripting (XSS) vulnerability exists within the Alosuite platform, specifically affecting the delivery note functionality. This issue arises from inadequate sanitization and encoding of input fields, permitting malicious JavaScript code to be stored. When other users access the affected records, this script executes in their browsers, which can lead to alterations in displayed content and unauthorized actions performed within the context of the user’s session. For exploitation, authenticated access to the affected functionality is required, emphasizing the need for proper security measures to safeguard applications.

References