CVE-2025-9104: Portabilis i-Diario Informações Adicionais /planos-de-aulas-por-disciplina cross site scripting
A flaw has been found in Portabilis i-Diario up to 1.5.0. The affected element is an unknown function of the file /planos-de-aulas-por-disciplina/ of the component Informações Adicionais Page. This manipulation of the argument Parecer/Objeto de Conhecimento/Habilidades causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9104?
CVE-2025-9104 is considered a high severity vulnerability due to its potential impact on the affected system.
How do I fix CVE-2025-9104?
To mitigate CVE-2025-9104, update Portabilis i-Diario to version 1.5.1 or higher.
What systems are affected by CVE-2025-9104?
CVE-2025-9104 affects Portabilis i-Diario versions up to and including 1.5.0.
What kind of vulnerability is CVE-2025-9104?
CVE-2025-9104 is a parameter manipulation vulnerability found in the Informações Adicionais Page.
Is there a workaround for CVE-2025-9104?
Currently, there are no documented workarounds for CVE-2025-9104, and the best course of action is to update the software.