← Database

CVE-2024-55239

MEDIUM CVSS: 5.4 Published: 2024-12-18 Modified: 2026-06-17

Description

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulo_documento' parameter.

Affected Platforms

Portabilis I-Educar

Weakness Type

CWE-79

References