CVE-2025-9721 — Portabilis i-Educar edit cross site scripting
A flaw has been found in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /module/FormulaMedia/edit. This manipulation of the argument nom…
Published: 2025-08-31 · CVSS: 5.1 · CVSS 4.0
A flaw has been found in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /module/FormulaMedia/edit. This manipulation of the argument nome/formulaMedia causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7