Stored XSS Vulnerability in Alosuite Affecting Delivery Note Functionality

CVE-2026-108056

What is CVE-2026-108056?

A stored Cross-Site Scripting (XSS) vulnerability exists in Alosuite, specifically affecting the delivery note functionality. This security flaw arises due to inadequate sanitization and encoding of user inputs, allowing malicious JavaScript to be stored and executed in the browsers of other users who access the compromised records. Exploiting this vulnerability requires authenticated access to the affected features, which can lead to unauthorized content manipulation and execution of actions within the targeted user's session.

References