CVE-2025-53935

Опубликовано: 16 июл. 2025

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the personalizacao_selecao.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers to inject malicious scripts in the id parameter. Version 3.4.5 fixes the issue.

Ссылки

https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-5x6v-h459-xjqh
Exploit
Vendor Advisory
https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-5x6v-h459-xjqh
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*

Версия до 3.4.5 (исключая)

EPSS

Процентиль: 7%

0.00031

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

BDU:2025-09273