CVE-2023-5578 Portábilis i-Educar HTTP GET Request agenda_imprimir.php cross site scripting
Remote attackers can execute arbitrary scripts via the agenda_imprimir.php endpoint in i-Educar, potentially stealing user cookies.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-5578?
CVE-2023-5578 is a medium-severity cross-site scripting vulnerability in Portabilis I-Educar, published on 14 Oct 2023. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agenda_imprimir.php of the component HTTP GET Request Handler. The manipulation of the argument cod_agenda with the input ");'> <script>alert(document.cookie)</script> results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. Upgrading the affected component is recommended. The vendor explains: "This endpoint and the associated functionality are no longer present in the current i-Educar codebase, as the affected area was removed from the product. As a result, the previously reported attack vector (...) is no longer applicable to versions in which this functionality has been removed."
Which versions are affected by CVE-2023-5578?
It affects 1 product.
Products include Portabilis I-Educar.
How do I fix CVE-2023-5578?
No fix has been published for CVE-2023-5578 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2023-5578 being exploited?
There is no known exploitation of CVE-2023-5578 in the wild and no public exploit code.
Other vulnerabilities in Portabilis I-Educar
- CVE-2024-45059 Authenticated SQL Injection in i-Educar
- CVE-2024-48325 SQL injection in n/a
- CVE-2024-45058 Privilege escalation in i-Educar
- CVE-2025-65022 i-Educar Authenticated Time-based SQL Injection in `agenda.php`
- CVE-2025-65023 i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`
Sources
Also known as GHSA-2qr8-62wg-7r5w.