CVE-2025-8346

Portabilis i-Educar 2.10 is affected. The vulnerability is a cross-site scripting flaw in educar_aluno_lst.php via the ref_cod_matricula parameter, exploitable remotely by injecting input like >, with user interaction required. Remediation: update to a newer Portabilis i-Educar version and san...

CVE-2025-8346: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educaralunolst.php. The manipulation of the argument refcodmatricula with the input " leads to cross site scripting. The attack may b...