CVE-2025-53932

Опубликовано: 16 июл. 2025

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the cadastro_adotante.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers to inject malicious scripts in the cpf parameter. Version 3.4.5 fixes the issue.

Ссылки

https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-3vfw-749q-qp6r
Exploit
Vendor Advisory
https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-3vfw-749q-qp6r
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*

Версия до 3.4.5 (исключая)

EPSS

Процентиль: 8%

0.00034

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

BDU:2025-09267