PT-2025-29841 · Wegia · Wegia

Elisangelasilvademendonca · Publicado 2025-07-11 · Atualizado 2025-07-16 · CVE-2025-53931

Positive Technologies (AI Summary)

CVSS v4.0

6.4

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.4.5

Description WeGIA is an open-source web manager designed for the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability exists in the adicionar raca.php endpoint. This allows attackers to inject malicious scripts into the raca parameter, which are then stored on the server and executed when users access the affected page.

Recommendations Update WeGIA to version 3.4.5 or later.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2025-09272

CVE-2025-53931

GHSA-9MFP-WFMJ-CG3J

Produtos afetados

Wegia

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53931.json · Exploit
• 🔥 https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-9mfp-wfmj-cg3j · Exploit
• https://twitter.com/CVEnew/status/1945562955103256695 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-53931 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1945584187500601751 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2025-09272 · Nota de Segurança
• https://t.me/cvetracker/27976 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-53931 · Aviso do Fabricante