Lucene search
K

11 matches found

NVD
NVD
added 2025/08/21 5:15 p.m.4 views

CVE-2025-57764

WeGIA is a Web manager for charitable institutions. Prior to 3.4.7, a Reflected Cross-Site Scripting XSS vulnerability was identified in the cargos.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msge parameter. This vulnerability is...

8.2CVSS0.00076EPSS
Exploits1References2
NVD
NVD
added 2025/08/21 5:15 p.m.3 views

CVE-2025-57765

WeGIA is a Web manager for charitable institutions. Prior to 3.4.7, a Reflected Cross-Site Scripting XSS vulnerability was identified in the precadastroadotante.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msge parameter. This...

8.2CVSS0.00076EPSS
Exploits1References2
CVE
CVE
added 2025/08/21 5:4 p.m.9 views

CVE-2025-57764

WeGIA is vulnerable to a reflected XSS in cargos.php via the msg_e parameter, prior to version 3.4.7. The issue allows injection of malicious scripts and has been fixed in 3.4.7. Affected product: WeGIA Web manager for charitable institutions; root cause: improper handling of user-supplied input ...

8.2CVSS5.8AI score0.00076EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2025/08/21 5:4 p.m.3 views

CVE-2025-57764 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'cargos.php' parameter 'msg_e'

WeGIA is a Web manager for charitable institutions. Prior to 3.4.7, a Reflected Cross-Site Scripting XSS vulnerability was identified in the cargos.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msge parameter. This vulnerability is...

6.5CVSS5.7AI score0.00076EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/08/21 12:0 a.m.1 views

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.4.7, which stems from the presence of reflective cross-site scripting in the msge parameter in the cargos.php endpoint, which could lead to...

8.2CVSS5.9AI score0.00076EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/08/21 12:0 a.m.3 views

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.4.7, which stems from the presence of reflective cross-site scripting in the msge parameter in the precadastroadotante.php endpoint, which coul...

8.2CVSS6AI score0.00076EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/01/13 11:31 p.m.15 views

CVE-2025-23034 Cross-Site Scripting (XSS) Reflected endpoint 'tags.php' parameter 'msg_e' in WeGIA

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the tags.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msge...

6.4CVSS0.0047EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/01/13 11:31 p.m.7 views

CVE-2025-23034 Cross-Site Scripting (XSS) Reflected endpoint 'tags.php' parameter 'msg_e' in WeGIA

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the tags.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msge...

6.4CVSS6AI score0.0047EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/01/08 7:42 p.m.16 views

CVE-2025-22143 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'listar_permissoes.php' parameter 'msg_e'

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the listarpermissoes.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msge parameter. This vulnerability is fixed i...

6.4CVSS0.00801EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/01/08 7:42 p.m.10 views

CVE-2025-22143 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'listar_permissoes.php' parameter 'msg_e'

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the listarpermissoes.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msge parameter. This vulnerability is fixed i...

6.4CVSS5.7AI score0.00801EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/08 12:0 a.m.1 views

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.2.8, which stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability that allows an attacker to inject malicio...

6.4CVSS5AI score0.00801EPSS
Exploits1References2
Rows per page
Query Builder