CVE-2025-55171

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, the application does not check authentication at endpoint /html/personalizacaoremover.php allowing anonymous attacker without login to delete any Image files at endpoin...

CVE-2025-55171

CVE-2025-55171 (WeGIA) affects WeGIA prior to version 3.4.8. The vulnerability arises from missing authentication checks at the endpoint /html/personalizacao_remover.php, allowing an anonymous attacker to delete image files by supplying an image id via the imagem_0 parameter. This leads to arbitr...