CVE-2025-10074 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /usuarios/tipos/. The manipulation of…
Medium CVSS: 5.1

CVE-2025-10074

A vulnerability was identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /usuarios/tipos/. The manipulation of the argument Tipos de Usuário/Descrição leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used.
Vendor
Portabilis
Product
I-educar
CWE
CWE-79
Yayın Tarihi
2025-09-08 01:15:39
Güncelleme
2025-09-09 15:52:14
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-79 I-educar MEDIUM Portabilis 2025

Referanslar

https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10074.md https://github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Stored%20endpoint%20%60.usuarios.tipos.(ID)%60%20parameters%20%60Tipos%20de%20Usu%C3%A1rio%60,%20%60Descri%C3%A7%C3%A3o%60.md https://vuldb.com/?ctiid.323022 https://vuldb.com/?id.323022 https://vuldb.com/?submit.644137