CVE-2025-53526

WeGIA is affected by a stored XSS in the file for memos (novo_memorando.php). The vulnerability is triggered when a memo is submitted and is executed in the browser upon loading listar_memorandos_antigos.php. The issue affects WeGIA versions prior to 3.4.3 and is fixed in 3.4.3. Remediation: upgr...

CVE-2025-53526 WeGIA allows Stored XSS attacks in novo_memorando.php

WeGIA is a web manager for charitable institutions. An XSS Injection vulnerability was identified in novomemorando.php. After the memo was submitted, the vulnerability was confirmed by accessing listarmemorandosantigos.php. Upon loading this page, the injected script was executed in the browser...