CVE-2026-59664 Multiple vulnerabilities in the Repasat application
MediumCVSS 4.8
EPSS 0.23%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomServicioPrestado” parameter is affected – endpoint “/es/providedservices/store”.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Repasat application | < Abril patch "20260402" | Abril patch "20260402" |