CVE-2025-54078 WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao_imagem.php' parameter 'err'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in versions prior to 3.4.6 in the personalizacaoimagem.php endpoint of the WeGIA application. This vulnerability allows...

CVE-2025-54078

WeGIA is an open source web manager. A Reflected Cross‑Site Scripting (XSS) vulnerability exists in the personalizacao_imagem.php endpoint, caused by insufficient input filtering/escaping of the err parameter. Affected versions are prior to 3.4.6; version 3.4.6 contains the fix. Impact is XSS exp...

CVE-2025-54078: Improper Neutralization of Input During Web Page Generation

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in versions prior to 3.4.6 in the personalizacaoimagem.php endpoint of the WeGIA application. This vulnerability allows...