CVE-2025-9653 Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scripting

A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarprojetocad.php of the component Cadastrar projeto Page. Such manipulation of the argument nome/observacao leads to cross site scripting. It is...

CVE-2025-9653

CVE-2025-9653 affects Portabilis i-Educar up to version 2.10. The vulnerability arises from manipulation of the nome/observacao argument in the file /intranet/educar_projeto_cad.php (Cadastrar projeto Page), enabling cross-site scripting. Exploitation can be performed remotely, and public PoCs ar...