PT-2025-31787 · Portabilis · I-Educar
Nmmorette
·
Published
2025-08-03
·
Updated
2025-08-03
·
CVE-2025-8510
Nmmorette
·
Published
2025-08-03
·
Updated
2025-08-03
·
CVE-2025-8510
4.0
Medium
Base vector | Vector | AV:N/AC:L/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions:
Portabilis i-Educar version 2.10
Description:
A problematic vulnerability exists in Portabilis i-Educar 2.10. The vulnerability affects the `Gerar` function within the `ieducar/intranet/educar matricula lst.php` file. Manipulation of the `ref cod aluno` argument can lead to cross-site scripting (XSS). The attack can be initiated remotely, and the exploit has been publicly disclosed.
Recommendations:
Apply the patch with identifier 82c288b9a4abb084bdfa1c0c4ef777ed45f98b46 to resolve this issue.
Exploit
Fix
XSS
Code Injection