Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 11:58 a.m.•20 views

CVE-2025-22618

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarcargo.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into...

6.4CVSS5.4AI score0.00331EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/13 9:15 p.m.•21 views

CVE-2025-22618

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarcargo.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into...

6.4CVSS0.00331EPSS
SaveExploits1References2
Circl
Circl
•added 2025/01/13 8:53 p.m.•31 views

CVE-2025-22618

creationtimestamp| type| source ---|---|--- 2025-01-13 20:53:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113823031946636210 2025-01-13 21:11:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1391 2025-01-13 21:15:56+00:00| seen|...

6.4CVSS5.3AI score0.00331EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/01/13 8:50 p.m.•60 views

CVE-2025-22618 WeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarcargo.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into...

6.4CVSS0.00331EPSS
SaveExploits1References2
CVE
CVE
•added 2025/01/13 8:50 p.m.•77 views

CVE-2025-22618

WeGIA is affected by a Stored XSS in the adicionar_cargo.php endpoint, via the cargo parameter. The root cause is inadequate validation/sanitization of user input, allowing a malicious payload to be stored on the server and executed in a user’s browser when the affected page is loaded. The issue ...

6.4CVSS5.2AI score0.00331EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/13 8:50 p.m.•20 views

CVE-2025-22618 WeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarcargo.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into...

6.4CVSS5.4AI score0.00331EPSS
SaveExploits1References2
Rows per page
Query Builder