CVE-2025-10591: Portabilis i-Educar Editar Função educar_funcao_cad.php cross site scripting
A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educarfuncaocad.php of the component Editar Função Page. This manipulation of the argument abreviatura/tipoacao causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10591?
CVE-2025-10591 is classified as a cross-site scripting (XSS) vulnerability.
How do I fix CVE-2025-10591?
To fix CVE-2025-10591, upgrade Portabilis i-Educar to a version later than 2.10.
What component is affected by CVE-2025-10591?
CVE-2025-10591 affects the Editar Função Page in the file /intranet/educar_funcao_cad.php.
What type of vulnerability is CVE-2025-10591?
CVE-2025-10591 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.
Which versions of Portabilis i-Educar are affected by CVE-2025-10591?
Portabilis i-Educar versions up to 2.10 are affected by CVE-2025-10591.