CVE-2025-7872

Low

Description

A weakness has been identified in Portabilis i-Diario 1.5.0. This affects an unknown function of the file /justificativas-de-falta. Executing a manipulation of the argument Justificativa can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. This patch is called 821342cd8d952e8bd214cb16145da785a92f5681. Applying a patch is advised to resolve this issue. The vendor confirms: "Audited values shown on that screen are now sanitized on output".

SeverityLow

CVSS3.5

Exploit probability—

ProductPortabilis I-diario

PublishedJul 20, 2025

First seenJul 20, 2025

Weakness typeCWE-79Cross-site scripting (XSS)CWE-94Code injection

How to fix

Patches

github.com/portabilis/i-diario/commit/821342cd8d952e8bd214cb16145da785a92f5681

Affected products

Product	Affected versions	Fixed in
portabilis i-diario	1.5.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.