CVE-2025-10606: Portabilis i-Educar ConfiguracaoMovimentoGeral cross site scripting
A weakness has been identified in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/Configuracao/ConfiguracaoMovimentoGeral. This manipulation of the argument tipoacao causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10606?
CVE-2025-10606 has been classified with a moderate severity due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-10606?
To fix CVE-2025-10606, update Portabilis i-Educar to version 2.11 or later, which addresses the vulnerability.
What systems are affected by CVE-2025-10606?
CVE-2025-10606 affects Portabilis i-Educar versions up to and including 2.10.
What type of vulnerability is CVE-2025-10606?
CVE-2025-10606 is a cross-site scripting (XSS) vulnerability that allows for manipulation of input in the web application.
Can CVE-2025-10606 be exploited remotely?
Yes, CVE-2025-10606 can be exploited remotely, which poses a risk to users accessing the affected application.