CVE-2025-8919: medium-severity vulnerability in Portabilis i-Diario
Portabilis i-Diario History objetivos-de-aprendizagem-e-habilidades cross site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.8epss 0.4%
A vulnerability was determined in Portabilis i-Diario up to 1.6. Affected is an unknown function of the file /objetivos-de-aprendizagem-e-habilidades of the component History Page. The manipulation of the argument código/objetivo habilidade leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
Portabilis · i-DiarioRelated CVEs — Portabilis i-Diario
In the same product, most dangerous first.
CVE-2025-9107MEDIUMPortabilis i-Diario search_autocomplete cross site scriptingEPSS 0.4%CVE-2025-9109MEDIUMPortabilis i-Diario Password Recovery Endpoint email observable response discrepancyEPSS 0.4%CVE-2025-8786MEDIUMPortabilis i-Diario Registro das atividades registros-de-conteudos-por-areas-de-conhecimento cross site scriptingEPSS 0.4%CVE-2025-8787MEDIUMPortabilis i-Diario Registro das atividades registros-de-conteudos-por-disciplina cross site scriptingEPSS 0.4%CVE-2025-8920MEDIUMPortabilis i-Diario Dicionário de Termos BNCC dicionario-de-termos-bncc cross site scriptingEPSS 0.3%CVE-2025-7871MEDIUMPortabilis i-Diario conteudos cross site scriptingEPSS 0.3%