CVE-2025-10099 – Portabilis i-Educar Editar usuário educar_usuario_cad.php cross site scripting

CVE ID : CVE-2025-10099

Published : Sept. 8, 2025, 6:15 p.m. | 39 minutes ago

Description : A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educar_usuario_cad.php of the component Editar usuário Page. This manipulation of the argument email/data_inicial/data_expiracao causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.

Severity: 4.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…