CVE-2026-108056
Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation requires authenticated access to the affected functionality. The code can alter the displayed content and perform actions within the context of the victim’s session. The list of features, parameters, and endpoints is as follows: CVE-2026-108056: NombrePF in ‘/Empresas/Create’;
| CWE | CWE-79 |
| Vendor | am system |
| Product | alo suite |
| Published | Nov 3, 2026 |
| Last Updated | Nov 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for am system alo suite
Be the first to know when new unknown vulnerabilities affecting am system alo suite are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
AM System / ALO Suite
25_09_15.03_35
References
Credits
David Padilla Alvarado