Portabilis i-Educar agenda_preferencias.php cross site scripting_CVE-2025-10605

5.3 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A security flaw has been discovered in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /agenda_preferencias.php. The manipulation of the argument tipoacao results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be exploited.

Basic Information

ID CVE-2025-10605

Source VulDB

Published Sep 17, 2025 at 17:32

Affected Product

Vendor Portabilis

Product i-Educar

Version 2.0

Affected Versions Portabilis i-Educar 2.0
Portabilis i-Educar 2.1
Portabilis i-Educar 2.2
Portabilis i-Educar 2.3
Portabilis i-Educar 2.4
Portabilis i-Educar 2.5
Portabilis i-Educar 2.6
Portabilis i-Educar 2.7
Portabilis i-Educar 2.8
Portabilis i-Educar 2.9
Portabilis i-Educar 2.10

CWE Classification

CWE-79 CWE-94

References

{
    "lastseen": "",
    "description": "A security flaw has been discovered in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /agenda_preferencias.php. The manipulation of the argument tipoacao results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be exploited.",
    "published": "2025-09-17T17:32:10.038Z",
    "modified": "2025-09-17T17:32:10.038Z",
    "type": "cve",
    "title": "Portabilis i-Educar agenda_preferencias.php cross site scripting",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.324625\nhttps://vuldb.com/?ctiid.324625\nhttps://vuldb.com/?submit.649872\nhttps://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10605.md\nhttps://github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Reflected%20endpoint%20%60agenda_preferencias.php%60%20parameter%20%60tipoacao%60.md",
    "id": "CVE-2025-10605",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79",
        "CWE-94"
    ],
    "cvelist": null,
    "sourceData": "Portabilis i-Educar 2.0\nPortabilis i-Educar 2.1\nPortabilis i-Educar 2.2\nPortabilis i-Educar 2.3\nPortabilis i-Educar 2.4\nPortabilis i-Educar 2.5\nPortabilis i-Educar 2.6\nPortabilis i-Educar 2.7\nPortabilis i-Educar 2.8\nPortabilis i-Educar 2.9\nPortabilis i-Educar 2.10",
    "sourceHref": "",
    "cvss": {
        "score": 5.3,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "i-Educar",
    "version": "2.0",
    "vendor": "Portabilis",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}