Portabilis i-Diario vulnerabilities

Portabilis i-Diario 1.5.0 has a cross-site scripting (XSS) vulnerability in the /justificativas-de-falta file via manipulation of the Justificativa argument. The attack can be launched remotely, and the exploit is publicly available.

Portabilis i-Diario 1.5.0 has a cross-site scripting (XSS) vulnerability in the /conteudos file via manipulation of the filter[by_description] argument. The attack can be launched remotely, and the exploit is publicly available.

Portabilis i-Diario 1.5.0 has a cross-site scripting (XSS) vulnerability in the app/uploaders/doc_uploader.rb file via manipulation of the Anexo argument. The attack can be launched remotely, and the exploit is publicly available.