CVE-2025-10373: Portabilis i-Educar educar_turma_tipo_cad.php cross site scripting
A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /intranet/educarturmatipocad.php. Such manipulation of the argument nmtipo leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10373?
CVE-2025-10373 has a medium severity due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-10373?
To mitigate CVE-2025-10373, ensure proper input validation and sanitization on the affected function in /intranet/educar_turma_tipo_cad.php.
Which versions of Portabilis i-Educar are affected by CVE-2025-10373?
CVE-2025-10373 affects all versions of Portabilis i-Educar up to version 2.10.
What type of attack is associated with CVE-2025-10373?
CVE-2025-10373 is associated with cross-site scripting (XSS) attacks.
Can CVE-2025-10373 be exploited remotely?
Yes, CVE-2025-10373 can be exploited remotely by manipulating the nm_tipo argument.