Skip to content
OpenAdvisories

Vendor

nilsonLazarin

5 known vulnerabilities.

Products

WeGIA 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2025-22132

    WeGIA has a Cross-Site Scripting (XSS) in File Upload Field

    WeGIA is a web manager for charitable institutions. A Cross-Site Scripting (XSS) vulnerability was identified in the file upload functionality of the WeGIA/html/socio/sistema/controller/controla_xlsx.php endpoint. By uploading a file containing malicious Java…

    nilsonLazarin WeGIA