CVE-2025-9106: Portabilis i-Diario Informações Adicionais /planos-de-ensino-por-disciplina cross site scripting
A vulnerability was found in Portabilis i-Diario up to 1.5.0. This affects an unknown function of the file /planos-de-ensino-por-disciplina/ of the component Informações Adicionais Page. Performing manipulation of the argument Parecer/Conteúdos/Objetivos results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9106?
CVE-2025-9106 is rated as high severity due to its potential to allow cross-site scripting (XSS) attacks.
How do I fix CVE-2025-9106?
To fix CVE-2025-9106, upgrade Portabilis i-Diario to version 1.5.1 or later.
What specific component is affected by CVE-2025-9106?
CVE-2025-9106 affects the Informações Adicionais Page of Portabilis i-Diario.
What kind of attack can CVE-2025-9106 enable?
CVE-2025-9106 can enable cross-site scripting (XSS) attacks by manipulating specific user input.
Is there a known exploit for CVE-2025-9106?
As of now, there are no publicly disclosed exploits for CVE-2025-9106.