CVE-2025-8510: Portabilis i-Educar educar_matricula_lst.php Gerar cross site scripting

Published Aug 3, 2025

Updated

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10. This affects the function Gerar of the file ieducar/intranet/educarmatriculalst.php. The manipulation of the argument refcodaluno leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 82c288b9a4abb084bdfa1c0c4ef777ed45f98b46. It is recommended to apply a patch to fix this issue. The vendor initially closed the original advisory without requesting a CVE.

Affected Software

2 affected components

Portabilis i-Educar

Portabilis i-Educar=2.10.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 82c288b9a4abb084bdfa1c0c4ef777ed45f98b46

Event History

Aug 3, 2025

CVE Published

via MITRE·01:02 PM

Data Sourced

via MITRE·01:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Jun 18, 58473

Event

via NVD·11:29 PM

Frequently Asked Questions

What is the severity of CVE-2025-8510?

CVE-2025-8510 is classified as a problematic vulnerability affecting Portabilis i-Educar 2.10.

How do I fix CVE-2025-8510?

To fix CVE-2025-8510, ensure proper validation and sanitization of input fields to protect against cross-site scripting.

What software is affected by CVE-2025-8510?

CVE-2025-8510 affects Portabilis i-Educar version 2.10.

What kind of attack can CVE-2025-8510 lead to?

CVE-2025-8510 can lead to cross-site scripting attacks due to improper handling of user input.

Which function is vulnerable in CVE-2025-8510?

The vulnerability in CVE-2025-8510 is found in the function Gerar of the file ieducar/intranet/educar_matricula_lst.php.