CVE-2025-10074: Portabilis i-Educar tipos cross site scripting
A vulnerability was identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /usuarios/tipos/. The manipulation of the argument Tipos de Usuário/Descrição leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10074?
CVE-2025-10074 is classified as a moderate severity vulnerability due to its potential for cross site scripting attacks.
How do I fix CVE-2025-10074?
To fix CVE-2025-10074, update Portabilis i-Educar to a version later than 2.10 where the vulnerability has been addressed.
What type of vulnerability is CVE-2025-10074?
CVE-2025-10074 is a cross site scripting (XSS) vulnerability.
Who is affected by CVE-2025-10074?
Users of Portabilis i-Educar up to version 2.10 are affected by CVE-2025-10074.
Can CVE-2025-10074 be exploited remotely?
Yes, CVE-2025-10074 can be exploited remotely, allowing attackers to execute XSS attacks.