CVE-2025-7110 Portabilis i-Educar School Module educar_escola_lst.php cross site scripting

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educarescolalst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate th...

i-Educar code injection vulnerability

i-Educar is a free educational software open source by Portábilis. A code injection vulnerability exists in i-Educar version 2.9.0, which stems from improper handling of the parameter Escola in the file /intranet/educarescolalst.php, which could lead to a cross-site scripting attack...