CVE-2025-22143

creationtimestamp| type| source ---|---|--- 2025-01-08 19:48:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113794464484805610 2025-01-08 20:14:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/826 2025-01-08 20:16:04+00:00| seen|...

CVE-2025-22143 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'listar_permissoes.php' parameter 'msg_e'

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the listarpermissoes.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msge parameter. This vulnerability is fixed i...

CVE-2025-22143 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'listar_permissoes.php' parameter 'msg_e'

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the listarpermissoes.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msge parameter. This vulnerability is fixed i...

CVE-2025-22143

CVE-2025-22143 describes a reflected cross-site scripting (XSS) vulnerability in WeGIA, a web manager for charitable institutions. The flaw exists in the listar_permissoes.php endpoint and affects the msg_e parameter, enabling an attacker to inject malicious scripts. Multiple sources confirm the ...

CVE-2025-22143 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'listar_permissoes.php' parameter 'msg_e'

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the listarpermissoes.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msge parameter. This vulnerability is fixed i...