CVE-2024-55239: Portabilis I-Educar

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulo_documento' parameter.

Affected products

• Portabilis I-Educar: version 2.9 only

Published 2024-12-18. Last modified 2026-06-17.