Elizeu Das Dores

**Name of the Vulnerable Software and Affected Versions** Setor Informatica SIL version 3.1 **Description** A Cross Site Scripting (XSS) issue allows attackers to run arbitrary code via the `hmessage` parameter. This enables attackers to execute malicious scripts on the affected system. **Recommendations** For Setor Informatica SIL version 3.1, consider restricting access to the `hmessage` parameter to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Setor Informatica S.I.L version 3.0 **Description** The issue allows remote attackers to execute arbitrary code via Open Redirect, specifically through the `hprinter` parameter. **Recommendations** For Setor Informatica S.I.L version 3.0, avoid using the `hprinter` parameter in affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.