CVE-2025-53526 — WeGIA allows Stored XSS attacks in novo_memorando.php
WeGIA is a web manager for charitable institutions. An XSS Injection vulnerability was identified in novo_memorando.php. After the memo was submitted, the vulnerability was conf…
Published: 2025-07-07 · CVSS: 2.0 · CVSS 4.0
WeGIA is a web manager for charitable institutions. An XSS Injection vulnerability was identified in novo_memorando.php. After the memo was submitted, the vulnerability was confirmed by accessing listar_memorandos_antigos.php. Upon loading this page, the injected script was executed in the browser. This vulnerability is fixed in 3.4.3.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7