CVE-2025-10605: Portabilis i-Educar agenda_preferencias.php cross site scripting
A security flaw has been discovered in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /agendapreferencias.php. The manipulation of the argument tipoacao results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10605?
CVE-2025-10605 is classified as a high severity vulnerability due to its potential for remote exploitation via cross site scripting.
How does CVE-2025-10605 affect Portabilis i-Educar?
CVE-2025-10605 affects the manipulation of the tipoacao argument in the file /agenda_preferencias.php, allowing cross site scripting attacks.
Can CVE-2025-10605 be exploited remotely?
Yes, CVE-2025-10605 can be exploited remotely, increasing the risk to users of Portabilis i-Educar.
What versions of Portabilis i-Educar are impacted by CVE-2025-10605?
CVE-2025-10605 affects Portabilis i-Educar versions up to and including 2.10.
How do I fix CVE-2025-10605 in Portabilis i-Educar?
To fix CVE-2025-10605, it's recommended to upgrade Portabilis i-Educar to a version that is not affected by this vulnerability.