Stored Cross-Site Scripting Vulnerability in Alosuite by AM Systems

CVE-2026-108058

What is CVE-2026-108058?

A stored Cross-Site Scripting (XSS) vulnerability affects Alosuite's delivery note functionality due to inadequate sanitization and encoding of user inputs. This flaw allows malicious JavaScript code to be stored and executed within the browsers of other users who access the compromised records. Exploitation of this vulnerability requires authenticated access, enabling attackers to modify displayed content and perform actions within the context of victims' sessions. The vulnerability highlights weaknesses in input validation and can significantly impact the integrity of user interactions within affected systems.

References