CVE-2025-8541: Portabilis i-Educar public_uf_cad.php cross site scripting

Published Aug 5, 2025

Updated

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /intranet/publicufcad.php. The manipulation of the argument nome leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

Portabilis i-Educar

Portabilis i-Educar=2.10.0

Event History

Aug 5, 2025

CVE Published

via MITRE·02:32 AM

Data Sourced

via MITRE·02:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Jun 19, 58473

Event

via NVD·10:00 AM

Frequently Asked Questions

What is the severity of CVE-2025-8541?

CVE-2025-8541 is considered a problematic vulnerability that can lead to cross-site scripting (XSS) attacks.

How do I fix CVE-2025-8541?

To fix CVE-2025-8541, ensure proper input validation and sanitization for the 'nome' parameter in /intranet/public_uf_cad.php.

What type of vulnerability is CVE-2025-8541?

CVE-2025-8541 is a cross-site scripting (XSS) vulnerability affecting Portabilis i-Educar.

Can CVE-2025-8541 be exploited remotely?

Yes, the CVE-2025-8541 vulnerability can be exploited remotely by manipulating the 'nome' argument.

Which software is affected by CVE-2025-8541?

CVE-2025-8541 affects Portabilis i-Educar version 2.10.