VYPR
results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. Upgrading the affected component is recommended. The vendor explains: \"This endpoint and the associated functionality are no longer present in the current i-Educar codebase, as the affected area was removed from the product. As a result, the previously reported attack vector (...) is no longer applicable to versions in which this functionality has been removed.\"","additionalType":"https://schema.org/SoftwareApplication","sameAs":["https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5578"]},"keywords":"CVE-2023-5578, Low, CWE-79, CWE-94, Portabilis I Educar, Portábilis i-Educar, Portabilis I Educar","mentions":[{"@type":"SoftwareApplication","name":"I Educar","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"Portabilis"}},{"@type":"SoftwareApplication","name":"i-Educar","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"Portábilis"}},{"@type":"SoftwareApplication","name":"I Educar","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"Portabilis"}}],"isAccessibleForFree":true},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://portal.vyprsec.ai/"},{"@type":"ListItem","position":2,"name":"CVEs","item":"https://portal.vyprsec.ai/cves"},{"@type":"ListItem","position":3,"name":"CVE-2023-5578","item":"https://portal.vyprsec.ai/cves/CVE-2023-5578"}]}]}
← All advisories
Low severity3.5NVD Advisory· Published Oct 14, 2023· Updated Sep 15, 2026

CVE-2023-5578

CVE-2023-5578

Description

A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agenda_imprimir.php of the component HTTP GET Request Handler. The manipulation of the argument cod_agenda with the input ");'> results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. Upgrading the affected component is recommended. The vendor explains: "This endpoint and the associated functionality are no longer present in the current i-Educar codebase, as the affected area was removed from the product. As a result, the previously reported attack vector (...) is no longer applicable to versions in which this functionality has been removed."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Portabilis/I Educarllm-fuzzy2 versions
    <=2.7.5+ 1 more
    • (no CPE)range: <=2.7.5
    • cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*range: <=2.7.5
  • Portábilis/i-Educarv5
    Range: 2.7.0

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.