PT-2026-22142 · Wolters Kluwer · A3Factura
CVE-2026-2679
·
Publicado
2026-02-26
·
Atualizado
2026-02-26
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
A3factura (affected versions not specified)
Description
The A3factura web platform is susceptible to a reflected Cross-Site Scripting (XSS) issue. The vulnerability exists in the
customerName parameter of the 'a3factura-app.wolterskluwer.es/#/incomes/salesInvoices' API endpoint. Successful exploitation could allow an attacker to execute arbitrary code in the victim's browser.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
A3Factura