CVE-2025-9724: Portabilis i-Educar educar_nivel_ensino_cad.php cross site scripting
A vulnerability was determined in Portabilis i-Educar up to 2.10. This impacts an unknown function of the file /intranet/educarnivelensinocad.php. Executing manipulation of the argument nmnivel/descricao can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9724?
CVE-2025-9724 has a high severity due to its ability to allow remote cross-site scripting attacks.
How do I fix CVE-2025-9724?
To mitigate CVE-2025-9724, upgrade Portabilis i-Educar to a version higher than 2.10 and ensure proper input validation and sanitization.
What versions of Portabilis i-Educar are affected by CVE-2025-9724?
CVE-2025-9724 affects Portabilis i-Educar versions up to and including 2.10.
Can CVE-2025-9724 be exploited remotely?
Yes, CVE-2025-9724 can be exploited remotely via manipulation of the argument nm_nivel/descricao.
What is the impact of CVE-2025-9724?
The impact of CVE-2025-9724 is the potential for cross-site scripting, which can lead to data theft or session hijacking.