CVE-2025-9720: Portabilis i-Educar Cadastrar tabela de arredondamento edit cross site scripting
A vulnerability was detected in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /module/TabelaArredondamento/edit of the component Cadastrar tabela de arredondamento Page. The manipulation of the argument Nome results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9720?
CVE-2025-9720 has a medium severity level as it allows for cross-site scripting (XSS) vulnerabilities.
How do I fix CVE-2025-9720?
To fix CVE-2025-9720, validate and sanitize user inputs to prevent cross-site scripting in the affected module.
Which component is affected by CVE-2025-9720?
CVE-2025-9720 affects the 'Cadastrar tabela de arredondamento' page within the Portabilis i-Educar software.
What is the impact of CVE-2025-9720?
The impact of CVE-2025-9720 is the potential execution of malicious scripts in the context of the user's browser.
What versions of i-Educar are vulnerable to CVE-2025-9720?
Portabilis i-Educar versions up to and including 2.10 are vulnerable to CVE-2025-9720.