https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 14:24:41 +0000 https://cve.radiocsirt.org/vuln/cve-2023-5578 <p><strong>Affected:</strong> Portábilis i-Educar</p> <p>A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agenda_imprimir.php of the component HTTP GET Request Handler. The manipulation of the argument cod_agenda with the input &#34;);&#39;&gt; &lt;script&gt;alert(document.cookie)&lt;/script&gt; results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. Upgrading the affected component is recommended. The vendor explains: &#34;This endpoint and the associated functionality are no longer present in the current i-Educar codebase, as the affected area was removed from the product. As a result, the previously reported attack vector (...) is no longer applicable to versions in which this functionality has been removed.&#34;</p> <p><strong>Affected:</strong> Portábilis i-Educar</p> <p>A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agenda_imprimir.php of the component HTTP GET Request Handler. The manipulation of the argument cod_agenda with the input &#34;);&#39;&gt; &lt;script&gt;alert(document.cookie)&lt;/script&gt; results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. Upgrading the affected component is recommended. The vendor explains: &#34;This endpoint and the associated functionality are no longer present in the current i-Educar codebase, as the affected area was removed from the product. As a result, the previously reported attack vector (...) is no longer applicable to versions in which this functionality has been removed.&#34;</p> https://cve.radiocsirt.org/vuln/cve-2023-5578