CVE-2025-23034

CVE-2025-23034 describes a reflected XSS in WeGIA’s tags.php endpoint, where the msg_e parameter is not validated or sanitized, allowing malicious scripts to be echoed back and executed in the victim’s browser. The vulnerability affects WeGIA versions prior to 3.2.6 and is addressed by upgrading ...