CVE-2023-5578

A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agenda_imprimir.php of the component HTTP GET Request Handler. The manipulation of the argument cod_agenda with the input ");'> <script>alert(document.cookie)</script> results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. Upgrading the affected component is recommended. The vendor explains: "This endpoint and the associated functionality are no longer present in the current i-Educar codebase, as the affected area was removed from the product. As a result, the previously reported attack vector (...) is no longer applicable to versions in which this functionality has been removed."

• CWE-79
• CWE-94

• https://github.com/portabilis/i-educar
• https://vuldb.com/cve/CVE-2023-5578
• https://vuldb.com/submit/217053
• https://vuldb.com/submit/649873
• https://vuldb.com/vuln/242143
• https://vuldb.com/vuln/242143/cti
• https://vuldb.com/?ctiid.242143Permissions Required, VDB Entry
• https://vuldb.com/?id.242143Third Party Advisory, VDB Entry

Published

Oct 14, 2023

Last Modified

Sep 15, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5572Server-Side Request Forgery (SSRF) in GitHub repository vrit…9.8
• CVE-2023-5573Allocation of Resources Without Limits or Throttling in GitH…6.5
• CVE-2023-5574A use-after-free flaw was found in xorg-x11-server-Xvfb. Thi…7
• CVE-2023-5575 Improper access control in the permission inheritance in D…6.5
• CVE-2023-5576The Migration, Backup, Staging - WPvivid plugin for WordPres…9.3
• CVE-2023-5577The Bitly's plugin for WordPress is vulnerable to Stored Cro…5.4
• CVE-2023-5579A vulnerability was found in yhz66 Sandbox 6.1.0. It has bee…6.5
• CVE-2023-5580A vulnerability classified as critical has been found in Sou…9.8
• CVE-2023-5581A vulnerability classified as problematic was found in Sourc…6.1
• CVE-2023-5582A vulnerability, which was classified as problematic, has be…5.4
• CVE-2023-5583The WP Simple Galleries plugin for WordPress is vulnerable t…8.8
• CVE-2023-5584Rejected reason: We have rejected this CVE as it was determi…