CVE-2026-1959

N/A

Descricao

Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via the 'descripción' parameter in the '/loggrodemo/jbrain/MaestraCuentasBancarias' endpoint.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado2/9/2026

Ultima modificacao2/9/2026

Fontenvd

Avistamentos honeypot0

Fraquezas (CWE)

CWE-79

Referencias

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-loggro-pymes-web-application(cve-coordination@incibe.es)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.