CVE-2025-8510

Portabilis i-Educar 2.10 is affected. The vulnerability is in the Gerar function of ieducar/intranet/educar_matricula_lst.php, where manipulating the ref_cod_aluno parameter enables cross-site scripting. The issue can be triggered remotely, with multiple sources noting public disclosure of the ex...

CVE-2025-8510 Portabilis i-Educar educar_matricula_lst.php Gerar cross site scripting

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10. This affects the function Gerar of the file ieducar/intranet/educarmatriculalst.php. The manipulation of the argument refcodaluno leads to cross site scripting. It is possible to initiate the attack remotely. Th...