CVE-2025-9652: Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scripting
A vulnerability was determined in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /intranet/educartransferenciatipocad.php of the component Cadastrar tipo de transferência Page. This manipulation of the argument nmtipo/desctipo causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9652?
CVE-2025-9652 is a high severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-9652?
To fix CVE-2025-9652, upgrade Portabilis i-Educar to version 2.10 or later.
What component is affected by CVE-2025-9652?
CVE-2025-9652 affects the 'Cadastrar tipo de transferência' page in Portabilis i-Educar.
What type of vulnerability is CVE-2025-9652?
CVE-2025-9652 is identified as a cross-site scripting (XSS) vulnerability.
Which versions of Portabilis i-Educar are vulnerable to CVE-2025-9652?
Portabilis i-Educar versions up to 2.10 are vulnerable to CVE-2025-9652.