CVE-2025-62597

WeGIA CVE-2025-62597 is a reflected XSS vulnerability in the editar_info_pessoal.php endpoint of WeGIA prior to version 3.5.1. The issue allows injection of scripts via the sql parameter in the GET request to /WeGIA/html/pessoa/editar_info_pessoal.php?sql=1. Several sources (NVD, Red Hat, CVE lis...

PT-2025-42907

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.5.1 Description WeGIA, a web manager for institutions, contains a reflected cross-site scripting XSS issue. An attacker can inject malicious scripts through the action parameter in the GET request to the...