⚠ Replicated advisory. This post reproduces an advisory originally researched and published under the CVE Hunters. It is republished here for reference. The original disclosure followed coordinated vulnerability disclosure and the rules of the CVE Program.

🔗 Original advisory: https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8510%20.md
📋 CVE record: CVE-2025-8510

Summary

A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the atendidos_cad.php endpoint of the i-educar application 2.10. This vulnerability allows attackers to inject malicious scripts in the ref_cod_alunoparameter.

Details

Vulnerable Endpoint: educar_matricula_lst.php Parameter: ref_cod_aluno

The application fails to validate and sanitize user inputs in the `ref_cod_aluno parameter. This lack of validation permits the injection of malicious payloads, which are reflected back to the user’s browser in the server’s response and executed within the context of the victim’s browser.

PoC

Insert the payload "><img%20src=x%20onerror=alert(%27CVE-Hunters%27)> in the field ref_cod_aluno

imagem

Full URL payload: https://localhost/intranet/educar_matricula_lst.php?ref_cod_aluno="><img%20src=x%20onerror=alert(%27CVE-Hunters%27)>

Impact

  • User actions: Attackers can perform any action the user can, such as viewing, modifying, or initiating interactions with other users
  • Data theft: Attackers can exfiltrate data or install malware on the user’s machine
  • Account compromise: Attackers can manipulate or steal cookies, or compromise confidential information
  • Malicious code: Attackers can execute malicious code on the user’s system
  • Business reputation damage: Attackers can deface a corporate website or spread misinformation
  • Misdirection: Attackers can change the instructions given to users, which can be dangerous if the target is a government website or provides vital resources

References

CVE-2025-8510

VulnDB-318609

I-Educar – Official Repository

Discoverer

Natan Maia Morette

by CVE-Hunters