Skip to contentWegia vulnerabilities
Newest
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'adicionar_alergia.php' parameter 'nome' in WeGIACVE-2025-230316.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'adicionar_escala.php' parameter 'escala' in WeGIACVE-2025-230326.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'adicionar_situacao.php' parameter 'situacao' in WeGIACVE-2025-230336.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Reflected endpoint 'tags.php' parameter 'msg_e' in WeGIACVE-2025-230346.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'adicionar_tipo_quadro_horario.php' parameter 'tipo' in WeGIACVE-2025-230356.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_funcionario.php' parameter 'msg_e' in WeGIACVE-2025-230366.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'control.php' parameter 'cargo' in WeGIACVE-2025-230376.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'CVE-2025-226136.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_editarInfoPessoal.php ' parameters 'nome' 'SobrenomeForm'CVE-2025-226146.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'CVE-2025-226156.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_parentesco_adicionar.php' parameter 'descricao'CVE-2025-226166.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_socio.php' parameter 'socio'CVE-2025-226176.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'CVE-2025-226186.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_permissoes.php' parameter 'msg_c'CVE-2025-226196.4 Medium
- labredescefetrj wegiaWeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `configuracao_doacao.php` parameter `avulso`CVE-2025-226006.4 Medium
- labredescefetrj wegiaWeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `home.php` parameter `msg_c`CVE-2025-225996.4 Medium
- labredescefetrj wegiaWeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'cadastrarSocio.php' parameter 'nome'CVE-2025-225988.3 High
- labredescefetrj wegiaWeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'CobrancaController.php' parameter 'local_recepcao'CVE-2025-225978.3 High
- labredescefetrj wegiaWeGIA has a Cross-Site Scripting (XSS) Reflected endpoint 'modulos_visiveis.php' parameter'msg_c'CVE-2025-225966.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'listar_permissoes.php' parameter 'msg_e'CVE-2025-221436.4 Medium
- labredescefetrj wegiaWeGIA SQL Injection (Blind Time-Based) endpoint 'verificar_recursos_cargo.php' parameter 'cargo'CVE-2025-221419.4 Critical
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint `configuracao_geral.php` parameter `msg`CVE-2025-221396.4 Medium
- labredescefetrj wegiaWeGIA SQL Injection (Blind Time-Based) endpoint 'dependente_listar_um.php' parameter 'id_dependente'CVE-2025-221409.4 Critical
- labredescefetrj wegiaWeGIA Allows Arbitrary File Upload with Remote Code Execution (RCE)CVE-2025-2213310.0 Critical
- labredescefetrj wegiaWeGIA has a Cross-Site Scripting (XSS) in File Upload FieldCVE-2025-221328.3 High
- wegiaWeGIA 3.2.0 before 3998672 does not verify permission to change a password.CVE-2024-534737.5 High
- wegiaWeGIA v3.2.0 was discovered to contain a Cross-Site Request Forgery (CSRF).CVE-2024-534728.8 High
- wegiaMultiple stored cross-site scripting (XSS) vulnerabilities in the component /configuracao...CVE-2024-534716.1 Medium
- wegiaMultiple stored cross-site scripting (XSS) vulnerabilities in the component /configuracao...CVE-2024-534706.1 Medium