6 matches found
CVE-2025-22615
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the CadastroAtendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts...
CVE-2025-22615
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the CadastroAtendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts...
CVE-2025-22615
creationtimestamp| type| source ---|---|--- 2025-01-13 20:59:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113823054078980794 2025-01-13 21:11:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1382 2025-01-13 21:15:48+00:00| seen|...
CVE-2025-22615
WeGIA CVE-2025-22615 describes a reflected XSS in Cadastro_Atendido.php where the cpf parameter is not validated/sanitized, allowing injected scripts to reflect in the response. The issue affects WeGIA and is addressed in version 3.2.6; users should upgrade. The connected sources also corroborate...
CVE-2025-22615 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the CadastroAtendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts...
CVE-2025-22615 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the CadastroAtendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts...