Cross Site Scripting Vulnerability in LabRedesCefetRJ WeGIA 3.4.0
CVE-2025-6695
What is CVE-2025-6695?
A cross site scripting vulnerability has been identified in the LabRedesCefetRJ WeGIA version 3.4.0, specifically in the handling of arguments within the adicionar_categoria.php file. This flaw allows attackers to craft input that will be executed in the context of a victim's browser, potentially leading to data theft, session hijacking, or redirecting users to malicious sites. The exploitation can be performed remotely, making it critical for users of this software to take immediate action to secure their applications. The vendor has been notified about this issue but has not responded publicly, increasing the urgency for users to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
WeGIA 3.4.0
References
CVSS V4
Timeline
Vulnerability published
Vulnerability Reserved
