6 matches found
CVE-2025-22618
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarcargo.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into...
CVE-2025-22618
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarcargo.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into...
CVE-2025-22618
creationtimestamp| type| source ---|---|--- 2025-01-13 20:53:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113823031946636210 2025-01-13 21:11:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1391 2025-01-13 21:15:56+00:00| seen|...
CVE-2025-22618 WeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarcargo.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into...
CVE-2025-22618 WeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarcargo.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into...
CVE-2025-22618
WeGIA is affected by a Stored XSS in the adicionar_cargo.php endpoint, via the cargo parameter. The root cause is inadequate validation/sanitization of user input, allowing a malicious payload to be stored on the server and executed in a user’s browser when the affected page is loaded. The issue ...