Cross-Site Scripting Vulnerability in Portabilis i-Educar Application

CVE-2025-8784

What is CVE-2025-8784?

A cross-site scripting vulnerability exists within the Portabilis i-Educar application, specifically in the Cadastrar Vínculo page. This flaw allows attackers to manipulate the 'nome' argument, potentially executing malicious scripts in the context of a user’s browser. The vulnerability can be exploited remotely, making it a severe risk for applications utilizing this software. Despite the vendor being notified, there has been no response to mitigate the issue, leaving users vulnerable to potential attacks.

References