CVE-2025-8540: Portabilis i-Educar public_municipio_cad.php cross site scripting

Published Aug 5, 2025

Updated

A vulnerability was found in Portabilis i-Educar 2.10. It has been classified as problematic. This affects an unknown part of the file /intranet/publicmunicipiocad.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

Portabilis i-Educar

Portabilis i-Educar=2.10.0

Event History

Aug 5, 2025

CVE Published

via MITRE·02:02 AM

Data Sourced

via MITRE·02:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Jun 22, 58473

Event

via NVD·02:38 PM

Frequently Asked Questions

What is the severity of CVE-2025-8540?

CVE-2025-8540 has been classified as problematic due to its potential for cross site scripting.

How do I fix CVE-2025-8540?

To fix CVE-2025-8540, sanitize and validate user inputs in the argument 'nome' to prevent XSS.

What component of Portabilis i-Educar is affected by CVE-2025-8540?

CVE-2025-8540 affects the /intranet/public_municipio_cad.php file of Portabilis i-Educar.

Can CVE-2025-8540 be exploited remotely?

Yes, CVE-2025-8540 can be exploited remotely through cross site scripting.

What type of vulnerability is CVE-2025-8540?

CVE-2025-8540 is categorized as a cross site scripting (XSS) vulnerability.