XSS in Loggro Pymes

CVE-2026-1959

Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via the 'descripción' parameter in the '/loggrodemo/jbrain/MaestraCuentasBancarias' endpoint.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.004 (32.2th percentile) — read the EPSS interpretation.

Affected products

Loggro Pymes — versions 0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve-coordination@incibe.es (patch)