CVE-2025-8918: Portabilis i-Educar Editar educar_instituicao_cad.php cross site scripting
A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /intranet/educarinstituicaocad.php of the component Editar Page. The manipulation of the argument neighborhood name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8918?
CVE-2025-8918 is classified as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2025-8918?
To fix CVE-2025-8918, ensure that the input on the file /intranet/educar_instituicao_cad.php is properly sanitized to prevent XSS.
What impact does CVE-2025-8918 have on users?
CVE-2025-8918 could allow attackers to execute arbitrary JavaScript in the context of a user's browser, leading to data theft or session hijacking.
Which versions of Portabilis i-Educar are affected by CVE-2025-8918?
CVE-2025-8918 affects Portabilis i-Educar versions up to and including 2.10.
Where does CVE-2025-8918 occur within the application?
CVE-2025-8918 occurs in the Editar Page component, specifically in the processing of the neighborhood name argument in /intranet/educar_instituicao_cad.php.