CVE-2025-22614

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the "dependenteeditarInfoPessoal.php" endpoint of the WeGIA application. This vulnerability allows attackers to inject malicio...

CVE-2025-22614: Improper Neutralization of Input During Web Page Generation

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the dependenteeditarInfoPessoal.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has a cross-site scripting vulnerability that stems from a stored cross-site scripting vulnerability contained in the nome and SobrenomeForm parameters of the dependenteeditarInfoPessoal.php file...

PT-2025-4600 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.6 Description: A Stored Cross-Site Scripting XSS vulnerability was identified in the dependente editarInfoPessoal.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scrip...