CVE-2025-8365

Name of the Vulnerable Software and Affected Versions Portabilis i-Educar version 2.10

Description A flaw exists in Portabilis i-Educar 2.10 within the atendidos cad.php file. Manipulation of the nome/nome social/email argument can trigger cross-site scripting. This issue is remotely exploitable. The exploit has been publicly disclosed and may be actively used. The vendor was notified but did not respond.

Recommendations As a mitigation, sanitize or encode the nome, nome social, and email parameters before using them in the atendidos cad.php file.