The vulnerability in the adicionar_raca.php script of the WeGIA web manager allows a hacker to perform cross-site scripting attacks.

The vulnerability of the adicionarraca.php script of the WeGIA web manager is related to the failure to protect the website structure when processing the raca parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17259)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adicionarraca.php endpoint raca parameter, no details of the vulnerability are provided at this time...

CVE-2025-53931: Improper Neutralization of Input During Web Page Generation

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarraca.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers to inject...