CVE-2025-8346

Name of the Vulnerable Software and Affected Versions Portabilis i-Educar version 2.10

Description A cross-site scripting issue exists due to the improper handling of user-supplied input. Specifically, manipulating the ref cod matricula argument with the input "> can trigger the vulnerability. The issue resides within the /educar aluno lst.php file. The exploit has been publicly disclosed and may be used. The vendor was contacted but did not respond.

Recommendations Update to a newer version of Portabilis i-Educar that addresses this issue. As a temporary workaround, sanitize the ref cod matricula input to prevent the injection of malicious code.