A weakness has been identified in Portabilis i-Educar 2.10. This affects an unknown function of the file /intranet/public_distrito_cad.php. This manipulation of the argument nome causes cross site sc…
Low CVSS 2.4
Summary
A weakness has been identified in Portabilis i-Educar 2.10. This affects an unknown function of the file /intranet/public_distrito_cad.php. This manipulation of the argument nome causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 2.12 mitigates this issue. It is recommended to upgrade the affected component. The vendor explains, that "[t]he reported attack vector wa…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://github.com/portabilis/i-educar/tree/2.12
- https://karinagante.github.io/cve-2025-8539/ Exploit
- https://vuldb.com/cve/CVE-2025-8539
- https://vuldb.com/submit/620453
- https://vuldb.com/vuln/318668
- https://vuldb.com/vuln/318668/cti
- https://github.com/KarinaGante/KGSec/blob/main/CVEs/i-educar/CVE-2025-8539.md Exploit
- https://vuldb.com/?submit.620453 Third Party Advisory
Timeline
- nvd_ingest NVD