CVE-2025-8346: Portabilis i-Educar educar_aluno_lst.php cross site scripting
A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educaralunolst.php. The manipulation of the argument refcodmatricula with the input "><img%20src=x%20onerror=alert(%27CVE-Hunters%27)> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8346?
CVE-2025-8346 is classified as a problematic vulnerability affecting Portabilis i-Educar 2.10.
How do I fix CVE-2025-8346?
To fix CVE-2025-8346, ensure to sanitize and validate the input for the argument ref_cod_matricula in the file /educar_aluno_lst.php.
What impact does CVE-2025-8346 have on my system?
CVE-2025-8346 may allow an attacker to execute arbitrary JavaScript code, potentially leading to cross-site scripting (XSS) attacks.
Which software versions are affected by CVE-2025-8346?
CVE-2025-8346 affects the Portabilis i-Educar version 2.10.
Is there an exploit available for CVE-2025-8346?
Yes, CVE-2025-8346 can be exploited through manipulating the ref_cod_matricula parameter to inject malicious scripts.