Skip to content
OpenAdvisories
Low · 2.0 CVE-2025-53525 EUVD-2025-20293

WebGia allows Cross-Site Scripting (XSS) in profile_familiar.php via the id_dependente parameter

Published Jul 7, 2025 · Updated Jul 7, 2025 · Assigned by GitHub_M

Description

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the profile_familiar.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the id_dependente parameter. This vulnerability is fixed in 3.4.3.

Affected products

VendorProductAffectedFixed
LabRedesCefetRJ WeGIA < 3.4.3 —

References