2025-12-01 10:40:07
INCIBE
PUBLISHED
Reflected Cross-site Scripting (XSS) vulnerability in Sanomas Clickedu. This vulnerability allows an attacker to execute JavaScript code in the victims browser by sending them a malicious URL in /students/carpetes_varies.php. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.