The vulnerability of the cadastro_adotante.php web manager of WeGIA allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the cadastroadotante.php script of the WeGIA web manager is related to the lack of measures taken to protect the structure of the web page when processing the cpf parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS...

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17260)

WeGIA is a web manager for welfare organizations from the individual developer Nilson Lazarin. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the cadastroadotante.php endpoint cpf parameter, no details ...