Vulnerabilidades de Sanoma
CVEs publicadas que afetam produtos de Sanoma: 2 registro(s), com severidade, exploração e correções.
CVE-2026-5010
Média · 5.1
CWE-79 27/03/2026
Reflected Cross-Site Scripting (XSS) in Sanoma’s Clickedu
A reflected Cross-Site Scripting (XSS) vulnerability has been discovered in Clickedu. This vulnerability allows an attacker to execute JavaScript code in the victim’s browser by sending them a malicious URL using the endpoint “/user.php/”. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on the user’s behalf.
CVE-2025-41070
Média · 4.8
CWE-79 01/12/2025
Reflected Cross-site Scripting (XSS) in Sanoma's Clickedu
Reflected Cross-site Scripting (XSS) vulnerability in Sanoma's Clickedu. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL in '/students/carpetes_varies.php'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.