CVE-2025-53526
WeGIA allows Stored XSS attacks in novo_memorando.php
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
WeGIA allows Stored XSS attacks in novo_memorando.php
WeGIA is a web manager for charitable institutions. An XSS Injection vulnerability was identified in novo_memorando.php. After the memo was submitted, the vulnerability was confirmed by accessing listar_memorandos_antigos.php. Upon loading this page, the injected script was executed in the browser. This vulnerability is fixed in 3.4.3.
Reserved 2025-07-02 | Published 2025-07-07 | Updated 2025-07-07 | Assigner GitHub_MCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
github.com/.../WeGIA/security/advisories/GHSA-46fm-hx2r-69fg
github.com/...ommit/f8cf5d0473334e6c28ea7f604da11ee2a7b419df
Support options
