The vulnerability in the adicionar_cor.php script of the WeGIA web manager allows a hacker to perform cross-site scripting attacks.

The vulnerability of the adicionarcor.php script of the WeGIA web manager is related to the lack of measures taken to protect the website structure during the processing of the cor parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17256)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adicionarcor.php endpoint cor parameter, no details of the vulnerability are provided at this time...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.4.5, which stems from insufficient cleanup of the adicionarcor.php endpoint cor parameter, which could lead to a stored cross-site...