CVE-2025-10590: Portabilis i-Educar educar_usuario_det.php cross site scripting
A security flaw has been discovered in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file /intranet/educarusuariodet.php. The manipulation of the argument refpessoa results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10590?
CVE-2025-10590 is classified as a high severity vulnerability due to the potential for remote exploitation via cross site scripting.
How do I fix CVE-2025-10590?
To mitigate CVE-2025-10590, you should upgrade Portabilis i-Educar to version 2.11 or later.
What are the consequences of exploiting CVE-2025-10590?
Exploiting CVE-2025-10590 can lead to unauthorized access and manipulation of user information through cross site scripting attacks.
Is CVE-2025-10590 easily exploitable?
Yes, CVE-2025-10590 is easily exploitable by an attacker with basic knowledge using remote techniques.
Which versions of Portabilis i-Educar are affected by CVE-2025-10590?
CVE-2025-10590 affects all versions of Portabilis i-Educar up to and including version 2.10.