Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2025-57763

Cross-Site Scripting (XSS) Reflected in 'insere_despacho.php' parameter 'sccs'

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

WeGIA is a Web manager for charitable institutions. Prior to 3.4.7, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the insere_despacho.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the cpf sccs. This vulnerability is fixed in 3.4.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LabRedesCefetRJ WeGIA

  • < 3.4.7affected

References