GHSA-ghvh-h254-3wf9MediumCVSS 3.5
A vulnerability was identified in Portabilis i-Educar up to 2.10. The affected element is an...
🔗 CVE IDs covered (1)
📋 Description
A vulnerability was identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /usuarios/tipos/. The manipulation of the argument Tipos de Usuário/Descrição leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used.
🔗 References (15)
- https://nvd.nist.gov/vuln/detail/CVE-2025-10074
- https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10074.md
- https://github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Stored%20endpoint%20%60.usuarios.tipos.(ID)%60%20parameters%20%60Tipos%20de%20Usu%C3%A1rio%60,%20%60Descri%C3%A7%C3%A3o%60.md
- https://vuldb.com/?ctiid.323022
- https://vuldb.com/?id.323022
- https://vuldb.com/?submit.644137
- https://github.com/portabilis/i-educar/commit/5b11c0376fcef7ada4c90760b0ca1ed2f16c4de9
- https://github.com/portabilis/i-educar
- https://github.com/portabilis/i-educar/tree/2.12
- https://vuldb.com/cve/CVE-2025-10074
- https://vuldb.com/submit/644137
- https://vuldb.com/submit/702974
- https://vuldb.com/vuln/323022
- https://vuldb.com/vuln/323022/cti
- https://github.com/advisories/GHSA-ghvh-h254-3wf9