Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-62358

WeGIA Reflected XSS to Account TakeOver at /html/configuracao/configuracao_geral.php via log parameter

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, the log parameter in configuracao_geral.php is vulnerable to Reflected Cross-Site Scripting (XSS). An attacker can inject arbitrary JavaScript, which executes in the victim’s browser. This vulnerability is fixed in 3.5.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LabRedesCefetRJ WeGIA

  • < 3.5.1affected

References