Vulnerability Database

309,134

Total vulnerabilities in the database

CVE-2025-53820

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the index.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers to inject malicious scripts in the erro parameter. Version 3.4.5 contains a patch for the issue.

  • Published: Jul 14, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-53820
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
wegia / wegia - 3.4.5