Reflected XSS Vulnerability in WeGIA for Charitable Institutions
CVE-2025-57765
6.5MEDIUM
What is CVE-2025-57765?
The WeGIA application, a web manager specifically designed for charitable institutions, has been identified to contain a reflected Cross-Site Scripting (XSS) vulnerability in the pre_cadastro_adotante.php endpoint. This flaw allows malicious actors to exploit the msg_e parameter to inject harmful scripts into user sessions. This issue has been addressed in version 3.4.7, ensuring enhanced security for users of the platform. It is crucial for organizations utilizing WeGIA to update to the latest version to protect against potential security breaches.
Affected Version(s)
WeGIA < 3.4.7