CVE-2024-55239

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulodocumento' parameter...

CVE-2024-55239

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulodocumento' parameter...

CVE-2024-55239

Portabilis i-Educar version 2.9 is affected by a reflected Cross-Site Scripting (XSS) vulnerability within its standard documentation upload functionality. The root cause is the improper handling of the 'titulo_documento' parameter, which allows an attacker to craft malicious URLs containing arbi...