CVE-2025-8919: Portabilis i-Diario History objetivos-de-aprendizagem-e-habilidades cross site scripting
A vulnerability was determined in Portabilis i-Diario up to 1.6. Affected is an unknown function of the file /objetivos-de-aprendizagem-e-habilidades of the component History Page. The manipulation of the argument código/objetivo habilidade leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8919?
CVE-2025-8919 has a medium severity rating due to its potential for cross-site scripting attacks.
How does CVE-2025-8919 affect Portabilis i-Diario?
CVE-2025-8919 affects the History Page component of Portabilis i-Diario versions up to 1.6 by allowing manipulation of the argument that can lead to cross-site scripting.
How do I fix CVE-2025-8919?
To fix CVE-2025-8919, update Portabilis i-Diario to the latest version that addresses the vulnerability.
What kind of attack can be executed through CVE-2025-8919?
CVE-2025-8919 can be exploited to execute cross-site scripting (XSS) attacks, potentially allowing attackers to inject malicious scripts.
Is CVE-2025-8919 limited to a specific version of Portabilis i-Diario?
Yes, CVE-2025-8919 specifically affects Portabilis i-Diario versions up to and including 1.6.