CVE-2025-7870 Portabilis i-Diario justificativas-de-falta Endpoint doc_uploader.rb cross site scripting

A vulnerability was identified in Portabilis i-Diario 1.5.0. The affected element is an unknown function of the file app/uploaders/docuploader.rb of the component justificativas-de-falta Endpoint. Such manipulation of the argument Anexo leads to cross site scripting. The attack can be launched...

CVE-2025-7870 Portabilis i-Diario justificativas-de-falta Endpoint doc_uploader.rb cross site scripting

A vulnerability was identified in Portabilis i-Diario 1.5.0. The affected element is an unknown function of the file app/uploaders/docuploader.rb of the component justificativas-de-falta Endpoint. Such manipulation of the argument Anexo leads to cross site scripting. The attack can be launched...

CVE-2025-7870

CVE-2025-7870 affects Portabilis i-Diario 1.5.0, specifically the justificativas-de-falta endpoint. The issue arises from unsanitized manipulation of the Anexo parameter, enabling cross-site scripting and remote exploitation. Public disclosure and vendor non-response are noted. A mitigation from ...