https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-8920.htmlhttps://patchthecve.com/cve/CVE-2025-8920.htmlWed, 17 Jun 2026 10:07:55 +0000LOW 2.4: A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack cahttps://patchthecve.com/cve/CVE-2025-8919.htmlhttps://patchthecve.com/cve/CVE-2025-8919.htmlWed, 17 Jun 2026 10:07:55 +0000LOW 2.4: A vulnerability was determined in Portabilis i-Diario up to 1.6. Affected is an unknown function of the file /objetivos-de-aprendizagem-e-habilidades of the component History Page. The manipulation of the argument código/objetivo habilidade leads to cross site scripting. It is possible to launch thehttps://patchthecve.com/cve/CVE-2025-8788.htmlhttps://patchthecve.com/cve/CVE-2025-8788.htmlWed, 17 Jun 2026 10:07:37 +0000LOW 3.5: A vulnerability was found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /planos-de-aula-por-areas-de-conhecimento/ of the component Informações adicionais. The manipulation of the argument Parecer/Conteúdos/Objetivohttps://patchthecve.com/cve/CVE-2025-8787.htmlhttps://patchthecve.com/cve/CVE-2025-8787.htmlSat, 10 Oct 2026 16:16:30 +0000LOW 3.5: A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. The affected element is an unknown function of the file /registros-de-conteudos-por-disciplina/ of the component Registro das atividades. The manipulation of the argument Registro de atividades/Conteúdos results in cross site schttps://patchthecve.com/cve/CVE-2025-8786.htmlhttps://patchthecve.com/cve/CVE-2025-8786.htmlSat, 10 Oct 2026 16:16:30 +0000LOW 3.5: A vulnerability was identified in Portabilis i-Diario up to 1.5.0. Impacted is an unknown function of the file /registros-de-conteudos-por-areas-de-conhecimento/ of the component Registro das atividades. The manipulation of the argument Registro de atividades/Conteúdos leads to cross site scripting.https://patchthecve.com/cve/CVE-2025-7872.htmlhttps://patchthecve.com/cve/CVE-2025-7872.htmlFri, 09 Oct 2026 17:16:42 +0000LOW 3.5: A weakness has been identified in Portabilis i-Diario 1.5.0. This affects an unknown function of the file /justificativas-de-falta. Executing a manipulation of the argument Justificativa can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to thehttps://patchthecve.com/cve/CVE-2025-7871.htmlhttps://patchthecve.com/cve/CVE-2025-7871.htmlFri, 09 Oct 2026 17:16:42 +0000LOW 3.5: A security flaw has been discovered in Portabilis i-Diario 1.5.0. The impacted element is an unknown function of the file /conteudos. Performing a manipulation of the argument filter[by_description] results in cross site scripting. The attack may be initiated remotely. The exploit has been released https://patchthecve.com/cve/CVE-2025-7870.htmlhttps://patchthecve.com/cve/CVE-2025-7870.htmlFri, 09 Oct 2026 17:16:42 +0000LOW 3.5: A vulnerability was identified in Portabilis i-Diario 1.5.0. The affected element is an unknown function of the file app/uploaders/doc_uploader.rb of the component justificativas-de-falta Endpoint. Such manipulation of the argument Anexo leads to cross site scripting. The attack can be launched remo