Medium severity4.3NVD Advisory· Published Sep 17, 2025· Updated Apr 29, 2026
CVE-2025-10590
CVE-2025-10590
Description
A security flaw has been discovered in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file /intranet/educar_usuario_det.php. The manipulation of the argument ref_pessoa results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
Affected products
2cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*range: <=2.10.0
- (no CPE)range: <=2.10
Patches
Vulnerability mechanics
References
4- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Reflected%20endpoint%20%60educar_usuario_det.php%60%20parameter%20%60ref_pessoa%60.mdnvdBroken Link
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.