CVE-2025-53929
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-53929
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53929.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-53929
- Aliases
-
- GHSA-mrwj-rf3q-3rqj
- Published
- 2025-07-16T15:44:17Z
- Modified
- 2025-10-22T18:47:44.333543Z
- Severity
-
- 6.4 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H CVSS Calculator
- Summary
- WeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint `adicionar_cor.php` parameter `cor`
- Details
-
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the
adicionar_cor.phpendpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers to inject malicious scripts into thecorparameter. The injected scripts are stored on the server and executed automatically whenever the affected pagecadastro_pet.phpis accessed by users, posing a significant security risk. Version 3.4.5 fixes the issue. - Database specific
{ "cwe_ids": [ "CWE-79" ] }- References