CVE-2025-53820

WeGIA is an open-source web manager for welfare organizations. A reflected Cross‑Site Scripting (XSS) vulnerability exists in the index.php endpoint before version 3.4.5, exploitable via the erro parameter due to insufficient input escaping/validation. Impact is described as user-injected script ...

CVE-2022-30776

atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...