CVE-2025-10372 – Portabilis i-Educar educar_modulo_cad.php cross site scripting

CVE ID : CVE-2025-10372

Published : Sept. 13, 2025, 6:15 p.m. | 31 minutes ago

Description : A weakness has been identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/educar_modulo_cad.php. This manipulation of the argument nm_tipo/descricao causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.

Severity: 5.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…