The vulnerability in the adicionar_especie.php script of the WeGIA web manager allows a attacker to perform cross-site scripting (XSS) attacks.

The vulnerability of the adicionarespecie.php script of the WeGIA web manager is related to the lack of measures taken to protect the website structure when processing the especie parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotel...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the adicionarespecie.php endpoint especie parameter, no details of the vulnerability are provided at this...

CVE-2025-23218

WeGIA is affected by a SQL Injection in the adicionar_especie.php endpoint. The vulnerability enables arbitrary SQL commands and a full database dump, leading to unauthorized access to sensitive data. Fixed in version 3.2.10; upgrade to 3.2.10 to patch the flaw. Public references note the issue a...