CVE-2026-2679

Published February 26, 2026 · Source: nvd

Description

Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in 'a3factura-app.wolterskluwer.es/#/incomes/salesInvoices' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness

CWE-79

Affected Products

• wolterskluwer — a3factura (4.111.2)

References

• [email protected]

← Browse all CVEs