The vulnerability of the index.php file of the WeGIA web manager allows attackers to perform cross-site scripting attacks.

The vulnerability of the index.php file of the WeGIA web manager is related to the failure to protect the structure of the web page when processing the erro parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

CVE-2025-53820 WeGIA vulnerable to Cross-Site Scripting (XSS) Reflected via endpoint 'index.php' parameter 'erro'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the index.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers to inject...

CVE-2024-51182

HTML Injection vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary HTML code via the "erro" parameter...

Celk Sistemas Celk Saude 安全漏洞

Celk Sistemas Celk Saude is a health sector management software from Celk Sistemas, Brazil. A security vulnerability exists in Celk Sistemas Celk Saude version 3.1.252.1, which originates from the presence of a hypertext markup language injection vulnerability that allows an attacker to inject...

PT-2025-2802 · Unknown · Celk Saude

Name of the Vulnerable Software and Affected Versions: Celk Saude version 3.1.252.1 Description: The issue arises from improper validation or sanitization of the erro parameter, which is returned as a response when incorrect credentials are entered during login. This makes the component susceptib...

PT-2025-2897 · Celk Sistemas · Celk Saude

Name of the Vulnerable Software and Affected Versions: Celk Sistemas Celk Saude version 3.1.252.1 Description: The issue allows a remote attacker to inject arbitrary HTML code via the erro parameter. This enables the attacker to potentially manipulate the webpage's content, leading to various...

Malicious code in react-erro-roevrlay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c73f6967c5add4d8ba288d24e7f5dca715c764fa83db8368704512bcde3f33aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5645 Malicious code in react-erro-roevrlay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c73f6967c5add4d8ba288d24e7f5dca715c764fa83db8368704512bcde3f33aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-13969

CRK Business Platform = 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent...