CVE-2025-8508

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-8508
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8508.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-8508
Published
2025-08-03T10:32:05.100Z
Modified
2026-08-12T03:51:46.287837076Z
Severity
  • 2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
Portabilis i-Educar educar_avaliacao_desempenho_cad.php cross site scripting
Details

A vulnerability was found in Portabilis i-Educar 2.9. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /intranet/educaravaliacaodesempenhocad.php. The manipulation of the argument tituloavaliacao/descricao leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific 
{
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8508.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "2.9"
                },
                {
                    "last_affected": "2.9"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/portabilis/i-educar

Affected ranges

Type
GIT
Repo
https://github.com/portabilis/i-educar
Events
Introduced
01528365015d93d5ac36a5ed060003b48bab55a2
Last affected
01528365015d93d5ac36a5ed060003b48bab55a2
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:portabilis:i-educar:2.9.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.9.0"
        },
        {
            "last_affected": "2.9.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*
2.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8508.json"