Cross Site Scripting Vulnerability in WeGIA Software by WeGIA
CVE-2024-57033

6.1MEDIUM

Key Information:

Vendor

WeGIA

Status
WeGIA
Vendor
CVE Published:
17 January 2025

What is CVE-2024-57033?

The WeGIA software, specifically versions prior to 3.2.0, is susceptible to a Cross Site Scripting (XSS) flaw. This vulnerability arises from improper handling of the dados_addInfo parameter in the documentos_funcionario.php file, allowing attackers to inject malicious scripts. If successfully executed, these scripts could compromise user data and lead to unauthorized actions within the application.

References

https://www.wegia.org/
https://github.com/nmmorette/vulnerability-research/tree/...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.