（CVE-2025-8784）Portabilis i-Educar 2.9及之前版本跨站脚本漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-8784
• https://access.redhat.com/security/cve/cve-2025-8784
• https://github.com/cisagov/vulnrichment/blob/develop/2025/8xxx/CVE-2025-8784.json
• https://socdefenders.ai/cves/CVE-2025-8784
• https://www.cvehunters.com/p/cve-2025-8784/
• https://cve.imfht.com/detail/CVE-2025-8784
• https://www.nsfocus.net/vulndb/131358
• https://vulners.com/redhatcve/RH:CVE-2025-8784
• https://github.com/portabilis/i-educar/security/advisories/GHSA-8fjj-9937-g84w

Related Vulnerabilities

• （CVE-2025-8786）Portabilis i-Diario 1.5.0及更早版本跨站脚本（XSS）漏洞
• （CVE-2025-8785）Portabilis i-Educar 2.9及之前版本跨站脚本漏洞
• （CVE-2025-8789）Portabilis i-Educar API Endpoint模块远程授权绕过漏洞
• （CVE-2025-8787）Portabilis i-Diario 活动记录组件跨站脚本漏洞
• （CVE-2025-8788）Portabilis i-Diario 1.5.0及之前版本Informações adicionais组件跨站脚本漏洞
• (CVE-2025-8790) Portabilis i-Educar API Endpoint 参数授权验证漏洞
• （CVE-2025-8545）Portabilis i-Educar 2.10 nm_motivo参数跨站脚本漏洞
• （CVE-2025-8538）Portabilis i-Educar 跨站脚本漏洞
• Portábilis i-Educar SQL注入漏洞