QwikSec

Security Database

CVE

CWE

Training

CVE-2025-53526

Published: Jul 7, 2025

Modified: Jul 7, 2025

PUBLISHED

Description

WeGIA is a web manager for charitable institutions. An XSS Injection vulnerability was identified in novo_memorando.php. After the memo was submitted, the vulnerability was confirmed by accessing listar_memorandos_antigos.php. Upon loading this page, the injected script was executed in the browser. This vulnerability is fixed in 3.4.3.

Vendor	Product	Versions
LabRedesCefetRJ	WeGIA	affected `< 3.4.3`

Weaknesses (CWE)

References

https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-46fm-hx2r-69fg

x_refsource_CONFIRM

https://github.com/LabRedesCefetRJ/WeGIA/commit/f8cf5d0473334e6c28ea7f604da11ee2a7b419df

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.