CVE-2025-9721: Portabilis i-Educar edit cross site scripting
A flaw has been found in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /module/FormulaMedia/edit. This manipulation of the argument nome/formulaMedia causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9721?
CVE-2025-9721 is classified as a cross-site scripting (XSS) vulnerability, which can be exploited remotely.
How do I fix CVE-2025-9721?
To fix CVE-2025-9721, update Portabilis i-Educar to the latest version beyond 2.10 where the vulnerability is patched.
What type of attack is possible with CVE-2025-9721?
CVE-2025-9721 is vulnerable to cross-site scripting attacks allowing attackers to compromise user sessions or inject malicious scripts.
Which versions of Portabilis i-Educar are affected by CVE-2025-9721?
CVE-2025-9721 affects Portabilis i-Educar versions up to and including 2.10.
Is CVE-2025-9721 remotely exploitable?
Yes, CVE-2025-9721 can be exploited remotely by attackers.