CVE-2025-7111: Portabilis i-Educar Course Module educar_curso_det.php cross site scripting

Published Jul 7, 2025

Updated

A vulnerability has been found in Portabilis i-Educar 2.9.0 and classified as problematic. This vulnerability affects unknown code of the file /intranet/educarcursodet.php?codcurso=ID of the component Course Module. The manipulation of the argument Curso leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

Portabilis i-Educar

Portabilis i-Educar=2.9.0

Event History

Jul 7, 2025

CVE Published

via MITRE·04:02 AM

Data Sourced

via MITRE·04:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-7111?

CVE-2025-7111 is classified as a problematic vulnerability.

How do I fix CVE-2025-7111?

To mitigate CVE-2025-7111, you should update Portabilis i-Educar to the latest version.

What components are affected by CVE-2025-7111?

CVE-2025-7111 affects the Course Module component of Portabilis i-Educar.

What type of vulnerability is CVE-2025-7111?

CVE-2025-7111 is a cross-site scripting (XSS) vulnerability.

Where in the application does CVE-2025-7111 occur?

CVE-2025-7111 occurs in the file /intranet/educar_curso_det.php?cod_curso=ID.