CVE-2025-8510

🗓️ 03 Aug 2025 13:02:06Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 13 Views🌐 WEB

Vulnerability CVE-2025-8510 in Portabilis i-Educar allows remote cross site scripting via Gerar function.

Reporter	Title	Published	Views	Family All 7
CNNVD	Portábilis i-Educar 代码注入漏洞	3 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-8510 Portabilis i-Educar educar_matricula_lst.php Gerar cross site scripting	3 Aug 202513:02	–	cvelist
EUVD	EUVD-2025-23476	3 Oct 202520:07	–	euvd
NVD	CVE-2025-8510	3 Aug 202513:15	–	nvd
Positive Technologies	PT-2025-31787 · Portabilis · I-Educar	3 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-8510	5 Aug 202513:18	–	redhatcve
Vulnrichment	CVE-2025-8510 Portabilis i-Educar educar_matricula_lst.php Gerar cross site scripting	3 Aug 202513:02	–	vulnrichment

NVD

Vulners

Node

portabilis i-educarMatch2.10.0

[
  {
    "vendor": "Portabilis",
    "product": "i-Educar",
    "versions": [
      {
        "version": "2.10",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/portabilis/i-educar/commit/82c288b9a4abb084bdfa1c0c4ef777ed45f98b46
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/CVE-Hunters/CVE/blob/main/i-educar/Reflected%20Cross-Site%20Scripting%20(XSS)%20in%20educar_matricula_lst.php%20via%20ref_cod_aluno%20Parameter.md
github	www.github.com/portabilis/i-educar/compare/GHSA-88xc-64vw-g4xg

Parameter	Position	Path	Description	CWE
ref_cod_aluno	path	ieducar/intranet/educar_matricula_lst.php	Cross-site scripting via manipulation of ref_cod_aluno in Gerar function	CWE-79, CWE-94

29 Apr 2026 01:00Current

3.7Low risk

Vulners AI Score3.7

CVSS 3.13.5 - 5.4

CVSS 24

CVSS 45.1

CVSS 33.5

EPSS0.00201

SSVC