CVE-2025-9653: Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scripting
A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarprojetocad.php of the component Cadastrar projeto Page. Such manipulation of the argument nome/observacao leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9653?
CVE-2025-9653 is considered a critical vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-9653?
To fix CVE-2025-9653, upgrade Portabilis i-Educar to version 2.11 or later, which addresses the vulnerability.
What are the affected versions of Portabilis i-Educar for CVE-2025-9653?
CVE-2025-9653 affects all versions of Portabilis i-Educar up to and including 2.10.
What component is vulnerable in CVE-2025-9653?
The vulnerability in CVE-2025-9653 is found in the file /intranet/educar_projeto_cad.php of the Cadastrar projeto Page component.
What type of attack does CVE-2025-9653 facilitate?
CVE-2025-9653 facilitates cross-site scripting (XSS) attacks through improper handling of user input.