EUVD-2025-2890

Malicious code in bioql PyPI...

CVE-2025-53934

CVE-2025-53934 affects the WeGIA web manager, with a Stored XSS in the control.php endpoint via the descricao_emergencia parameter. The issue exists in versions prior to 3.4.5 and causes injected scripts to be stored and executed when the affected page is accessed. Version 3.4.5 fixes the issue. ...

CVE-2025-27499

WeGIA is an open-source Web Manager for institutions. CVE-2025-27499 describes a Stored Cross-Site Scripting (XSS) vulnerability in the processa_edicao_socio.php endpoint, exploitable via the socio_nome parameter. The attack stores malicious scripts on the server that execute when the affected pa...

CVE-2025-23036

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the precadastrofuncionario.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious...