CVE-2025-8542

Name of the Vulnerable Software and Affected Versions Portabilis i-Educar version 2.10

Description A problematic issue exists due to cross site scripting. The manipulation of the argument fantasia/razao social in the file /intranet/empresas cad.php may allow for remote exploitation. The exploit has been publicly disclosed.

Recommendations As a temporary workaround, consider restricting access to the /intranet/empresas cad.php file until a fix is available. Sanitize the fantasia/razao social argument to prevent the injection of malicious scripts.