CVE-2025-8370: Portabilis i-Educar educar_escolaridade_lst.php cross site scripting

Published Jul 31, 2025

Updated

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9. Affected is an unknown function of the file /intranet/educarescolaridadelst.php. The manipulation of the argument descricao leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

Portabilis i-Educar

Portabilis i-Educar=2.9.0

Event History

Jul 31, 2025

CVE Published

via MITRE·06:32 AM

Data Sourced

via MITRE·06:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Jun 18, 58473

Event

via NVD·09:05 AM

Frequently Asked Questions

What is the severity of CVE-2025-8370?

CVE-2025-8370 has been classified as problematic due to its potential for cross-site scripting attacks.

How do I fix CVE-2025-8370?

To fix CVE-2025-8370, ensure proper validation and sanitization of the 'descricao' parameter in the affected file.

What application is affected by CVE-2025-8370?

CVE-2025-8370 affects the Portabilis i-Educar version 2.9 application.

What type of vulnerability is CVE-2025-8370?

CVE-2025-8370 is classified as a cross-site scripting (XSS) vulnerability.

Where can I find more information about CVE-2025-8370?

Additional information about CVE-2025-8370 can typically be found in security advisories and vulnerability databases.