| Package | Affected versions | Patched versions |
|---|---|---|
| i-educar | = 2.9 |
A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulo_documento' parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free