CVE-2025-8369: Portabilis i-Educar educar_avaliacao_desempenho_lst.php cross site scripting

Published Jul 31, 2025

Updated

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9. This issue affects some unknown processing of the file /intranet/educaravaliacaodesempenholst.php. The manipulation of the argument tituloavaliacao leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

Portabilis i-Educar

Portabilis i-Educar=2.9.0

Event History

Jul 31, 2025

CVE Published

via MITRE·06:02 AM

Data Sourced

via MITRE·06:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeaknessAffected Software

Jun 24, 58473

Event

via NVD·06:04 AM

Frequently Asked Questions

What is the severity of CVE-2025-8369?

CVE-2025-8369 is classified as problematic due to its potential for cross-site scripting attacks.

How do I fix CVE-2025-8369?

To fix CVE-2025-8369, ensure proper input validation and sanitization in the affected file /intranet/educar_avaliacao_desempenho_lst.php.

What versions of i-Educar are affected by CVE-2025-8369?

CVE-2025-8369 affects Portabilis i-Educar version 2.9.

What type of vulnerability is CVE-2025-8369?

CVE-2025-8369 is a cross-site scripting (XSS) vulnerability.

What is the impact of CVE-2025-8369 on users?

CVE-2025-8369 can allow attackers to inject malicious scripts into web pages viewed by users, potentially compromising their data.