Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

ALO Suite — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in ALO Suite, with AI-generated Chinese analysis, references, and POCs.

Vendor: AM System

CVE ID Title CVSS Severity Published
CVE-2026-108060 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. CWE-79 5.1 Medium 2026-11-03
CVE-2026-108059 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. CWE-79 5.1 Medium 2026-11-03
CVE-2026-108058 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. CWE-79 5.1 Medium 2026-11-03
CVE-2026-108057 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. CWE-79 5.1 Medium 2026-11-03
CVE-2026-108056 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. CWE-79 5.1 Medium 2026-11-03
CVE-2026-108055 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. CWE-79 5.1 Medium 2026-11-03
CVE-2026-108054 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. CWE-79 5.1 Medium 2026-11-03
CVE-2026-108053 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. CWE-79 5.1 Medium 2026-11-03
CVE-2026-108052 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. CWE-79 5.1 Medium 2026-11-03
CVE-2026-108051 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. CWE-79 5.1 Medium 2026-11-03
CVE-2026-108050 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. CWE-79 5.1 Medium 2026-11-03
CVE-2026-108049 Clickjacking vulnerability in the Alosuite web application. CWE-1021 5.1 Medium 2026-11-03
CVE-2026-108048 Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality. CWE-770 6.9 Medium 2026-11-03
CVE-2026-108047 Inadequate authorization vulnerability in Alosuite’s user invitation functionality 8.6 High 2026-11-03
CVE-2026-108046 Direct Object Reference (IDOR) vulnerability in Alosuite CWE-639 6.9 Medium 2026-11-03

All 15 known CVE vulnerabilities affecting ALO Suite with full Chinese analysis, references, and POCs where available.