CVE-2025-9105: Portabilis i-Diario Informações Adicionais /planos-de-ensino-por-areas-de-conhecimento cross site scripting
A vulnerability has been found in Portabilis i-Diario up to 1.5.0. The impacted element is an unknown function of the file /planos-de-ensino-por-areas-de-conhecimento/ of the component Informações Adicionais Page. Such manipulation of the argument Parecer/Conteúdos/Objetivos leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9105?
CVE-2025-9105 is classified as a cross-site scripting vulnerability, which can lead to unauthorized script execution in the user's browser.
How do I fix CVE-2025-9105?
To fix CVE-2025-9105, upgrade to a version of Portabilis i-Diario newer than 1.5.0 where the vulnerability is addressed.
What versions of Portabilis i-Diario are affected by CVE-2025-9105?
CVE-2025-9105 affects all versions of Portabilis i-Diario up to and including version 1.5.0.
What component of Portabilis i-Diario is impacted by CVE-2025-9105?
CVE-2025-9105 impacts the Informações Adicionais Page in the file /planos-de-ensino-por-areas-de-conhecimento/.
What type of attack could exploit CVE-2025-9105?
CVE-2025-9105 could be exploited to carry out cross-site scripting attacks, potentially allowing attackers to execute malicious scripts in a victim's session.