CVE-2025-57763

Cross-Site Scripting (XSS) Reflected in 'insere_despacho.php' parameter 'sccs'

State: Published
Severity: 6.4 Medium
Published: Aug 21, 2025
Updated: Aug 21, 2025
Reserved: Aug 19, 2025

Description

WeGIA is a Web manager for charitable institutions. Prior to 3.4.7, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the insere_despacho.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the cpf sccs. This vulnerability is fixed in 3.4.7.

Scores

CVSS	Score	Vector	Source
4.0	6.4 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H	GitHub_M

Weaknesses

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

Product	Versions
WeGIALabRedesCefetRJ	< 3.4.7Affected

References

https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-67w3-jf96-f754

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.