CVE-2025-8509

Name of the Vulnerable Software and Affected Versions Portabilis i-Educar version 2.9

Description A vulnerability exists in Portabilis i-Educar 2.9, rated as problematic. The issue affects an unknown functionality within the /intranet/educar servidor cad.php file. Manipulation of the matricula argument can lead to cross-site scripting (XSS). The attack can be launched remotely, and the exploit has been publicly disclosed. The vendor was contacted regarding this disclosure but did not respond.

Recommendations Portabilis i-Educar version 2.9: Sanitize or properly validate the matricula parameter to prevent the injection of malicious scripts.