VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Aug 21, 2025· Updated Jun 17, 2026

CVE-2025-57762

CVE-2025-57762

Description

WeGIA is a Web manager for charitable institutions. Prior to 3.4.7, there is a Stored Cross-Site Scripting (XSS) vulnerability in the dependente_docdependente.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the nome parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 3.4.7.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Wegia/Wegia2 versions
    cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*range: <3.4.7
    • (no CPE)range: <3.4.7
  • LabRedesCefetRJ/Wegiallm-fuzzy2 versions
    <3.4.7+ 1 more
    • (no CPE)range: <3.4.7
    • (no CPE)range: < 3.4.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.