PT-2025-4370

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.8 Description: A critical issue was identified in the "/WeGIA/html/socio/sistema/controller/controla xlsx.php" endpoint, which accepts file uploads without proper validation. This allows the upload of malicious...

PT-2025-4369 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.7 Description: A Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the "WeGIA/html/socio/sistema/controller/controla xlsx.php" endpoint. By uploading a file containing...

PT-2024-35753 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions 3.2.0 before 3998672 Description: The issue is related to a lack of permission verification when changing a password. This means that the software does not check if the user has the necessary permissions to change a password,...

CVE-2024-53472

WeGIA v3.2.0 was discovered to contain a Cross-Site Request Forgery CSRF...