Cross Site Scripting Vulnerability in LabRedesCefetRJ WeGIA Version 3.4.0
CVE-2025-6699

5.1MEDIUM

Key Information:

Vendor: Labredescefetrj
Status: Wegia
Vendor: CVE Published:; 26 June 2025

🔔 Create Labredescefetrj Vulnerability Alert

What is CVE-2025-6699?

A cross site scripting vulnerability has been discovered in the WeGIA 3.4.0 application by LabRedesCefetRJ, specifically within the /html/funcionario/cadastro_funcionario.php file. This issue arises from improper handling of user input in the Nome/Sobrenome argument, enabling attackers to inject malicious scripts that can be executed in the context of a user's session. The vulnerability allows remote attackers to exploit the application without requiring authentication. Public disclosure of this exploit heightens the urgency for users to assess their security posture and implement necessary mitigations. Notably, this issue is distinct from other vulnerabilities reported for the same product.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch