CVE-2025-9106 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in Portabilis i-Diario up to 1.5.0. This affects an unknown function of the file /planos-de-ensino-por-disciplina/ of the component In…
Medium CVSS: 5.1

CVE-2025-9106

A vulnerability was found in Portabilis i-Diario up to 1.5.0. This affects an unknown function of the file /planos-de-ensino-por-disciplina/ of the component Informações Adicionais Page. Performing manipulation of the argument Parecer/Conteúdos/Objetivos results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vendor
Portabilis
Product
I-diario
CWE
CWE-79
Yayın Tarihi
2025-08-18 05:15:28
Güncelleme
2025-09-02 18:21:49
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-79 I-diario MEDIUM Portabilis 2025

Referanslar

https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-9106%20.md https://github.com/marcelomulder/CVE/blob/main/i-diario/Stored%20XSS%20endpoint%20planos-de-ensino-por-disciplina.(ID)%20in%20multiples%20parameters.md#poc https://vuldb.com/?ctiid.320428 https://vuldb.com/?id.320428 https://vuldb.com/?submit.627567 https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-9106%20.md https://vuldb.com/?submit.627567