CVE-2025-8786

Name of the Vulnerable Software and Affected Versions: Portabilis i-Diario versions up to 1.5.0

Description: A cross-site scripting issue exists due to the manipulation of the Registro de atividades/Conteúdos argument. The issue affects an unknown function of the /registros-de-conteudos-por-areas-de-conhecimento/ file within the Registro das atividades component. This allows for remote attacks. The exploit is publicly available. The vendor was notified but did not respond.

Recommendations: Versions prior to 1.5.0: Address the manipulation of the Registro de atividades/Conteúdos argument in the /registros-de-conteudos-por-areas-de-conhecimento/ file to prevent cross-site scripting.