PT-2025-38244
CVE-2025-10606
·
Publicado
2025-09-17
·
Atualizado
2025-09-18
Descrição por
CVSS 3.1
6.1
MédiaMétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Portabilis i-Educar versions up to 2.10
Description
A weakness has been identified in Portabilis i-Educar that allows for cross site scripting. The issue affects unknown processing of the file
/module/Configuracao/ConfiguracaoMovimentoGeral. Manipulation of the argument tipoacao can trigger the issue. Remote exploitation is possible, and the exploit has been made publicly available.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾