Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-59669 EUVD-2026-91319GHSA-qq5x-j93v-98rw

Multiple vulnerabilities in the Repasat application

Published Oct 2, 2026 · Updated Oct 6, 2026 · Assigned by INCIBE

Description

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”

Affected products

VendorProductAffectedFixed
Repasat Repasat application < Abril patch "20260402" Abril patch "20260402"

References