（CVE-2025-8785）Portabilis i-Educar 2.9及之前版本跨站脚本漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-8785
• https://www.cvedetails.com/cve/CVE-2025-8785/
• https://access.redhat.com/security/cve/cve-2025-8785
• https://github.com/advisories/GHSA-33g2-mrr9-4jv5
• https://www.cvehunters.com/p/cve-2025-8785/
• https://cve.imfht.com/detail/CVE-2025-8785
• https://www.nsfocus.net/vulndb/131351
• https://vuldb.com/vuln/318667
• https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2025-8785

Related Vulnerabilities

• （CVE-2025-8786）Portabilis i-Diario 1.5.0及更早版本跨站脚本（XSS）漏洞
• （CVE-2025-8789）Portabilis i-Educar API Endpoint模块远程授权绕过漏洞
• （CVE-2025-8787）Portabilis i-Diario 活动记录组件跨站脚本漏洞
• （CVE-2025-8788）Portabilis i-Diario 1.5.0及之前版本Informações adicionais组件跨站脚本漏洞
• (CVE-2025-8790) Portabilis i-Educar API Endpoint 参数授权验证漏洞
• （CVE-2025-8784）Portabilis i-Educar 2.9及之前版本跨站脚本漏洞
• （CVE-2025-8545）Portabilis i-Educar 2.10 nm_motivo参数跨站脚本漏洞
• （CVE-2025-8538）Portabilis i-Educar 跨站脚本漏洞
• Portábilis i-Educar SQL注入漏洞