Back to Database
Status published
Low
CVE-2025-53525
WebGia allows Cross-Site Scripting (XSS) in profile_familiar.php via the id_dependente parameter
Vulnerability Description
WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the profile_familiar.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the id_dependente parameter. This vulnerability is fixed in 3.4.3.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53525
Credits & Attribution
No credits recorded in the NVD database.
References
More from LabRedesCefetRJ
View All →CVE-2025-6699
LabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scripting
Medium
5.1
CVE-2025-6698
LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scripting
Medium
5.1
CVE-2025-6697
LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scripting
Medium
5.1
CVE-2025-6696
LabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scripting
Medium
5.1
CVE-2025-6695
LabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scripting
Medium
5.1
Affected Vendor
LabRedesCefetRJ
View all reports →Affected Software
WeGIA
Vulnerable Versions:
< 3.4.3
Timeline
Official Publish:
July 7th, 2025
Last Modified:
July 7th, 2025
Added to House:
July 22nd, 2026