CVE-2025-9722: Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross site scripting
A vulnerability has been found in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file /intranet/educartipoocorrenciadisciplinarcad.php. Such manipulation of the argument nmtipo/descricao leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9722?
CVE-2025-9722 is a critical vulnerability that can lead to cross-site scripting attacks.
How do I fix CVE-2025-9722?
To fix CVE-2025-9722, upgrade Portabilis i-Educar to version 2.11 or later.
What type of attack is associated with CVE-2025-9722?
CVE-2025-9722 is associated with cross-site scripting (XSS) attacks.
Which versions of Portabilis i-Educar are affected by CVE-2025-9722?
CVE-2025-9722 affects all versions of Portabilis i-Educar up to and including version 2.10.
What does CVE-2025-9722 allow an attacker to do?
CVE-2025-9722 allows an attacker to manipulate certain arguments to inject malicious scripts into web pages.