Back to Database
Status published
Low
CVE-2025-58452
WeGIA vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint 'listar_despachos.php' parameter 'id_memorando'
Vulnerability Description
WeGIA is a Web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the listar_despachos.php endpoint of the WeGIA application prior to version 3.4.11. This vulnerability allows attackers to inject malicious scripts in the id_memorando parameter. Version 3.4.11 contains a patch.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-58452
Credits & Attribution
No credits recorded in the NVD database.
More from LabRedesCefetRJ
View All →CVE-2025-6699
LabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scripting
Medium
5.1
CVE-2025-6698
LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scripting
Medium
5.1
CVE-2025-6697
LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scripting
Medium
5.1
CVE-2025-6696
LabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scripting
Medium
5.1
CVE-2025-6695
LabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scripting
Medium
5.1
Affected Vendor
LabRedesCefetRJ
View all reports →Affected Software
WeGIA
Vulnerable Versions:
< 3.4.11
Timeline
Official Publish:
September 8th, 2025
Last Modified:
September 9th, 2025
Added to House:
July 22nd, 2026