CVE-2024-55239

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulodocumento' parameter...

CVE-2024-55239

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulodocumento' parameter...

CVE-2024-55239

The Portabilis i-Educar version 2.9 software contains a reflected Cross-Site Scripting (XSS) vulnerability within the standard documentation upload functionality. The root cause is the improper neutralization of input in the 'titulo_documento' parameter, which allows an attacker to craft maliciou...