Unrated severityNVD Advisory· Published Feb 26, 2026· Updated Feb 26, 2026
Multiple vulnerabilities in A3factura software
CVE-2026-2678
Description
Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/customers' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser.
Affected products
1- Range: 4.111.2-rev.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.