CVE-2025-9738: Portabilis i-Educar educar_tipo_ensino_cad.php cross site scripting
A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educartipoensinocad.php. Executing manipulation of the argument nmtipo can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9738?
CVE-2025-9738 has a significant severity level as it allows for cross-site scripting, which can lead to unauthorized access and data manipulation.
How do I fix CVE-2025-9738?
To fix CVE-2025-9738, ensure you validate and sanitize user inputs for the argument nm_tipo in the affected file, /intranet/educar_tipo_ensino_cad.php.
What systems are affected by CVE-2025-9738?
CVE-2025-9738 affects Portabilis i-Educar versions up to 2.10.
Can CVE-2025-9738 be exploited remotely?
Yes, CVE-2025-9738 can be exploited remotely by manipulating the argument nm_tipo.
What kind of vulnerability is CVE-2025-9738 classified as?
CVE-2025-9738 is classified as a cross-site scripting vulnerability.