CVE-2025-10584: Portabilis i-Educar educar_calendario_anotacao_cad.php cross site scripting
A vulnerability was identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/educarcalendarioanotacaocad.php. Such manipulation of the argument nmanotacao/descricao leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10584?
The severity of CVE-2025-10584 is classified as high due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-10584?
To fix CVE-2025-10584, upgrade Portabilis i-Educar to a version later than 2.10 where the vulnerability has been addressed.
What impact does CVE-2025-10584 have?
CVE-2025-10584 allows attackers to execute malicious scripts in user browsers by manipulating the nm_anotacao/descricao argument.
Who is affected by CVE-2025-10584?
Users of Portabilis i-Educar versions up to 2.10 are affected by CVE-2025-10584.
What should I do if I cannot upgrade to fix CVE-2025-10584?
If you cannot upgrade, consider implementing input validation and output encoding to mitigate the effects of CVE-2025-10584.