CVE-2025-9723: Portabilis i-Educar educar_tipo_regime_cad.php cross site scripting
A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educartiporegimecad.php. Performing manipulation of the argument nmtipo results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9723?
CVE-2025-9723 is categorized with a severity level that indicates potential for cross site scripting vulnerabilities in Portabilis i-Educar.
How do I fix CVE-2025-9723?
To remediate CVE-2025-9723, ensure to sanitize and validate inputs to the affected functions within the Portabilis i-Educar application.
Which versions of Portabilis i-Educar are affected by CVE-2025-9723?
CVE-2025-9723 affects all versions of Portabilis i-Educar up to and including version 2.10.
Can CVE-2025-9723 be exploited remotely?
Yes, CVE-2025-9723 can be exploited remotely by attackers manipulating the 'nm_tipo' argument.
What type of vulnerability is CVE-2025-9723?
CVE-2025-9723 is a cross site scripting (XSS) vulnerability impacting the functionality of an unknown function in the application.