CVE-2025-7110: Portabilis i-Educar School Module educar_escola_lst.php cross site scripting

Published Jul 7, 2025

Updated

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educarescolalst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

Portabilis i-Educar

Portabilis i-Educar=2.9.0

Event History

Jul 7, 2025

CVE Published

via MITRE·03:32 AM

Data Sourced

via MITRE·03:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeaknessAffected Software

Jun 14, 58473

Event

via NVD·02:35 PM

Frequently Asked Questions

What is the severity of CVE-2025-7110?

CVE-2025-7110 is classified as a problematic vulnerability.

How do I fix CVE-2025-7110?

To fix CVE-2025-7110, ensure to sanitize and validate user input in the School Module's file to prevent cross-site scripting.

What components are affected by CVE-2025-7110?

CVE-2025-7110 affects the School Module in Portabilis i-Educar version 2.9.0.

What kind of attack can CVE-2025-7110 lead to?

CVE-2025-7110 can lead to cross-site scripting attacks due to improper handling of user input.

In which file can the CVE-2025-7110 vulnerability be found?

The CVE-2025-7110 vulnerability can be found in the file /intranet/educar_escola_lst.php.