CVE-2025-22617

WeGIA (open-source web manager) has a Reflected XSS in the editar_socio.php endpoint, affecting the socio parameter due to insufficient input validation/sanitization. Attackers can inject scripts that are reflected in the server response and executed in the victim’s browser. Remediation is upgrad...

CVE-2025-22617

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the "editarsocio.php" endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in...

CVE-2025-22617: Improper Neutralization of Input During Web Page Generation

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the editarsocio.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in t...