CVE-2025-10591

Published September 17th, 2025

View on NVD ↗

CVSS v3

3.5

LOW

CVSS v2

MEDIUM

Affected

PROJECT

Description

A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educar_funcao_cad.php of the component Editar Função Page. This manipulation of the argument abreviatura/tipoacao causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

marcelomulder/CVE

CVE's POC

GitHub