CVE-2025-9723 MEDIUM

CVE-2025-9723: Portabilis i-Educar educar_tipo_regime_cad.php cross site scripting

Vendor Portabilis
Product i-Educar
Weakness CWE-79 · XSS
Published August 31, 2025
Last update October 13, 2025
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educar_tipo_regime_cad.php. Performing manipulation of the argument nm_tipo results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used.

Key dates

02Disclosure timeline

August 31, 2025 CVE published
October 13, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-1102 SourceCodester Royale Event Management System companyprofile.php cross site scripting CVE-2024-12240 Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter CVE-2018-25090 Wago: Improper Neutralization of Input During Web Page Generation in multiple devices CVE-2022-29422 WordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities CVE-2026-10057 ITP Technology｜ITS Intelligent SCADA System - Stored Cross-Site Scripting