Reflected XSS Vulnerability in WeGIA for Charitable Institutions
CVE-2025-57765

6.5MEDIUM

Key Information:

Status
Vendor
CVE Published:
21 August 2025

What is CVE-2025-57765?

The WeGIA application, a web manager specifically designed for charitable institutions, has been identified to contain a reflected Cross-Site Scripting (XSS) vulnerability in the pre_cadastro_adotante.php endpoint. This flaw allows malicious actors to exploit the msg_e parameter to inject harmful scripts into user sessions. This issue has been addressed in version 3.4.7, ensuring enhanced security for users of the platform. It is crucial for organizations utilizing WeGIA to update to the latest version to protect against potential security breaches.

Affected Version(s)

WeGIA < 3.4.7

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-57765 : Reflected XSS Vulnerability in WeGIA for Charitable Institutions