CVE-2025-22132

WeGIA is a web manager for charitable institutions. A Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the WeGIA/html/socio/sistema/controller/controlaxlsx.php endpoint. By uploading a file containing malicious JavaScript code, an attacker can execute...

CVE-2025-22132

creationtimestamp| type| source ---|---|--- 2025-01-07 22:10:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113789358194226275 2025-01-07 22:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6ofjv27f22 2025-01-07 22:37:05+00:00|...

CVE-2025-22132 WeGIA has a Cross-Site Scripting (XSS) in File Upload Field

WeGIA is a web manager for charitable institutions. A Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the WeGIA/html/socio/sistema/controller/controlaxlsx.php endpoint. By uploading a file containing malicious JavaScript code, an attacker can execute...