Stored Cross-Site Scripting Vulnerability in Alosuite by AM Systems

CVE-2026-108057

What is CVE-2026-108057?

A stored Cross-Site Scripting (XSS) vulnerability exists in Alosuite, specifically impacting the delivery note functionality. This flaw arises from inadequate sanitization and encoding of user-input fields, permitting attackers to store malicious JavaScript. When other users access the affected records, the stored script is executed in their browsers, allowing the attacker to manipulate displayed content and potentially perform actions within the victim's session. Exploiting this vulnerability necessitates authenticated access to the impacted functionality, making it critical for users to be aware and take appropriate security measures.

References