Unrated severityNVD Advisory· Published Dec 18, 2024· Updated Dec 25, 2024

CVE-2024-55239

Description

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulo_documento' parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Portabilis/I Educarcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =2.9

Patches

Vulnerability mechanics

References

github.com/RegularUs3r/CVE-Research/blob/main/CVE-2024/Portabilis%20-%20iEducar/CVE-2024-55239%20-%20Reflected%20Cross-Site%20Scripting.mdmitre
github.com/RegularUs3r/CVE-Research/blob/main/CVE-2024/Portabilis%20-%20iEducar/CVE-2024-55649%20-%20Reflected%20Cross-Site%20Scripting.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000