Reflected XSS Vulnerability in WeGIA Web Manager by LabRedesCefetRJ
CVE-2025-53932

6.4MEDIUM

Key Information:

Vendor

Labredescefetrj

Status
Wegia
Vendor
CVE Published:
16 July 2025

What is CVE-2025-53932?

WeGIA, an open-source web manager designed for Portuguese-speaking charitable institutions, has been identified with a reflected Cross-Site Scripting (XSS) vulnerability in the cadastro_adotante.php endpoint. This flaw allows an attacker to inject malicious scripts through the cpf parameter, potentially compromising user data and the integrity of the application. To mitigate this risk, users are advised to upgrade to version 3.4.5 or later, which addresses this vulnerability.

Affected Version(s)

WeGIA < 3.4.5

References

https://github.com/LabRedesCefetRJ/WeGIA/security/advisor...
x_refsource_CONFIRM

CVSS V4

Score:
6.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-53932 : Reflected XSS Vulnerability in WeGIA Web Manager by LabRedesCefetRJ