CNNVD-202508-188 Information

Aug 03, 2025 cve

CNNVD ID

CNNVD-202508-188

CVE-2025-8511

CNNVD Published: 2025-08-03

Description (Chinese)

Portabilis i‑Diário是巴西Portabilis开源的一个学校教学日历与教师互动管理系统。 Portabilis i‑Diário 1.5.0版本存在代码注入漏洞，该漏洞源于文件/diario-de-observacoes/中参数Descrição的错误操作导致跨站脚本。

Description (English)

Portabilis i-Diário is an interactive management system for school calendars and teachers that is an open source in Portabilis, Brazil. Version 1.5.0 of Portabilis i-Diário contains a code-injection loophole resulting from the error in the file/diario-de-observacoes/median parameter Descrição resulting in a cross-site script.

Hazard Level

Critical

Vulnerability Type

代码注入

Published

2025-08-03

Last Modified

2026-02-24

References

https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-8511.md https://github.com/marcelomulder/CVE/blob/main/i-diario/Stored%20XSS%20endpoint%20diario-de-observacoes.(ID)%20in%20’Observa%C3%A7%C3%B5es-Descri%C3%A7%C3%A3o’%20parameter.md https://vuldb.com/?ctiid.318610 https://vuldb.com/?id.318610 https://vuldb.com/?submit.618973

Share on: