WeGIA web manager XSS

The vulnerability of the adicionarespecie.php script of the WeGIA web manager is related to the lack of measures taken to protect the website structure when processing the especie parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotel...

CVE-2025-53930

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the "adicionarespecie.php" endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers to...

CVE-2025-53930: Improper Neutralization of Input During Web Page Generation

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarespecie.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers to inje...

WeGIA Cross-Site Script Vulnerabilities

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the adicionarespecie.php endpoint especie parameter, no details of the vulnerability are provided at this...

CVE-2025-23218

WeGIA is affected by a SQL Injection in the adicionar_especie.php endpoint. The vulnerability enables arbitrary SQL commands and a full database dump, leading to unauthorized access to sensitive data. Fixed in version 3.2.10; upgrade to 3.2.10 to patch the flaw. Public references note the issue a...

CVE-2025-23218: Improper Neutralization of Special Elements used in an SQL Command

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionarespecie.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands ...