CVE-2025-10074

A vulnerability was identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /usuarios/tipos/. The manipulation of the argument Tipos de Usuário/Descrição leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used.

• CWE-79
• CWE-94

• https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10074.mdExploit, Third Party Advisory
• https://github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Stored%20endpoint%20%60.usuarios.tipos.(ID)%60%20parameters%20%60Tipos%20de%20Usu%C3%A1rio%60,%20%60Descri%C3%A7%C3%A3o%60.mdBroken Link
• https://vuldb.com/?ctiid.323022Permissions Required, VDB Entry
• https://vuldb.com/?id.323022Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.644137Third Party Advisory, VDB Entry

Published

Sep 8, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10068A flaw has been found in itsourcecode Online Discussion Foru…9.8
• CVE-2025-1007In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/{…5.3
• CVE-2025-10070A flaw has been found in Portabilis i-Educar up to 2.10. Thi…6.3
• CVE-2025-10071A vulnerability has been found in Portabilis i-Educar up to …6.3
• CVE-2025-10072A vulnerability was found in Portabilis i-Educar up to 2.10.…6.3
• CVE-2025-10073A vulnerability was determined in Portabilis i-Educar up to …4.3
• CVE-2025-10075A security flaw has been discovered in SourceCodester Online…5.4
• CVE-2025-10076A weakness has been identified in SourceCodester Online Poll…9.8
• CVE-2025-10077A security vulnerability has been detected in SourceCodester…9.8
• CVE-2025-10078A vulnerability was detected in SourceCodester Online Pollin…9.8
• CVE-2025-10079A flaw has been found in PHPGurukul Small CRM 4.0. Affected …9.8
• CVE-2025-1008The Recently Purchased Products For Woo plugin for WordPress…6.4