CVE Feed

    Dashboard / CVE / CVE-2025-7872

    CVE-2025-7872

    A weakness has been identified in Portabilis i-Diario 1.5.0. This affects an unknown function of the file /justificativas-de-falta. Executing a manipulation of the argument Justificativa can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. This patch is called 821342cd8d952e8bd214cb16145da785a92f5681. Applying a patch is advised to resolve this issue. The vendor confirms: "Audited values shown on that screen are now sanitized on output".

    Published:Jul 20, 2025
    Last Modified:Oct 9, 2026
    EPS:Jul 20, 2025
    EPSS Score:0.0029
    CVSS Score:3.5

    Affected Products

    Vendor
    Portabilis
    Product
    I-diario

    Exploits

    https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-7872.mdhttps://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-7872.md

    Related CVEs

    CVE-2025-9236 (CVSS 2.1) — A vulnerability has been found in Portabilis i-Educar up to 2.10. This affects an unknown function of the file…
    CVE-2025-9109 (CVSS 2.9) — A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an u…
    CVE-2025-9108 (CVSS 2.1) — Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of…
    CVE-2025-9107 (CVSS 2.1) — A vulnerability was determined in Portabilis i-Diario up to 1.5.0. This impacts an unknown function of the fil…
    CVE-2025-9106 (CVSS 2) — A vulnerability was found in Portabilis i-Diario up to 1.5.0. This affects an unknown function of the file /pl…
    CVE-2025-9105 (CVSS 2) — A vulnerability has been found in Portabilis i-Diario up to 1.5.0. The impacted element is an unknown function…
    CVE-2025-9104 (CVSS 2) — A flaw has been found in Portabilis i-Diario up to 1.5.0. The affected element is an unknown function of the f…
    CVE-2025-8920 (CVSS 1.9) — A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functi…
    CVE-2025-8919 (CVSS 1.9) — A vulnerability was determined in Portabilis i-Diario up to 1.6. Affected is an unknown function of the file /…
    CVE-2025-8788 (CVSS 2) — A vulnerability was found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this i…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High