CVE-2025-9722

A vulnerability has been found in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file /intranet/educar_tipo_ocorrencia_disciplinar_cad.php. Such manipulation of the argument nm_tipo/descricao leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-79
• CWE-94

• https://karinagante.github.io/cve-2025-9722/
• https://karinagante.github.io/cve-2025-9722/#poc
• https://vuldb.com/?ctiid.322011Permissions Required, VDB Entry
• https://vuldb.com/?id.322011Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.638697Third Party Advisory, VDB Entry

Published

Aug 31, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9716A vulnerability was determined in O2OA up to 10.0-410. Affec…5.4
• CVE-2025-9717A vulnerability was identified in O2OA up to 10.0-410. Affec…5.4
• CVE-2025-9718A security flaw has been discovered in O2OA up to 10.0-410. …5.4
• CVE-2025-9719A weakness has been identified in O2OA up to 10.0-410. This …5.4
• CVE-2025-9720A vulnerability was detected in Portabilis i-Educar up to 2.…5.4
• CVE-2025-9721A flaw has been found in Portabilis i-Educar up to 2.10. The…5.4
• CVE-2025-9723A vulnerability was found in Portabilis i-Educar up to 2.10.…5.4
• CVE-2025-9724A vulnerability was determined in Portabilis i-Educar up to …5.4
• CVE-2025-9725A vulnerability was identified in Cudy LT500E up to 2.3.12. …8.8
• CVE-2025-9726A security flaw has been discovered in Campcodes Farm Manage…9.8
• CVE-2025-9727A weakness has been identified in D-Link DIR-816L 206b01. Af…9.8
• CVE-2025-9728A security vulnerability has been detected in givanz Vvveb 1…6.1