（CVE-2025-8538）Portabilis i-Educar 跨站脚本漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-8538
• https://karinagante.github.io/cve-2025-8538/
• https://www.cve.org/CVERecord?id=CVE-2025-8538
• https://vuldb.com/vuln/318667
• https://access.redhat.com/security/cve/cve-2025-8538
• https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8538.md
• https://github.com/portabilis/i-educar/security/advisories/GHSA-8fjj-9937-g84w
• https://cve.imfht.com/detail/CVE-2025-8538

Related Vulnerabilities

• （CVE-2025-8786）Portabilis i-Diario 1.5.0及更早版本跨站脚本（XSS）漏洞
• （CVE-2025-8785）Portabilis i-Educar 2.9及之前版本跨站脚本漏洞
• （CVE-2025-8789）Portabilis i-Educar API Endpoint模块远程授权绕过漏洞
• （CVE-2025-8787）Portabilis i-Diario 活动记录组件跨站脚本漏洞
• （CVE-2025-8788）Portabilis i-Diario 1.5.0及之前版本Informações adicionais组件跨站脚本漏洞
• (CVE-2025-8790) Portabilis i-Educar API Endpoint 参数授权验证漏洞
• （CVE-2025-8784）Portabilis i-Educar 2.9及之前版本跨站脚本漏洞
• （CVE-2025-8545）Portabilis i-Educar 2.10 nm_motivo参数跨站脚本漏洞
• Portábilis i-Educar SQL注入漏洞