CVE-2026-1960
Awaiting Analysis
Awaiting Analysis - Queue
Stored XSS in Loggro Pymes via Facebook Parameter Endpoint
Publication date: 2026-02-09
Last updated on: 2026-02-09
Assigner: Spanish National Cybersecurity Institute, S.A. (INCIBE)
Description
Description
Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via theΒ 'Facebook' parameter in '/loggrodemo/jbrain/ConsultaTerceros' endpoint.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| loggro | pymes | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |