CVE-2026-2680

Name of the Vulnerable Software and Affected Versions A3factura web platform (affected versions not specified)

Description A reflected Cross-Site Scripting (XSS) issue exists in the A3factura web platform. The issue is located in the customerVATNumber parameter of the ''a3factura-app.wolterskluwer.es/#/incomes/salesDeliveryNotes'' endpoint. This could allow an attacker to execute arbitrary code in the victim's browser.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.