WE
Product
WeGIA
188
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 40High 51Medium 96Low 0
Watch
Add WeGIA to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-22596 | 6.5 | Jan 10 | WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint 'modulos_visiveis.php' parameter'msg_c' Affected: < 3.2.8 |
| CVE-2026-42870 | 6.4 | May 11 | WeGIA: Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao' Affected: < 3.7.0 |
| CVE-2026-40282 | 6.4 | Apr 17 | WeGIA has stored XSS in intercorrencia_visualizar.php Affected: < 3.6.10 |
| CVE-2026-42872 | 6.1 | May 11 | WeGIA: Reflected XSS in listar_arquivos_etapa.php Affected: < 3.7.0 |
| CVE-2026-35475 | 6.1 | Apr 6 | WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect'] Affected: < 3.6.9 |
| CVE-2026-35474 | 6.1 | Apr 6 | WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect'] Affected: < 3.6.9 |
| CVE-2026-35473 | 6.1 | Apr 6 | WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage'] Affected: < 3.6.9 |
| CVE-2026-35399 | 6.1 | Apr 6 | WeGIA has Stored XSS in backup file names Affected: < 3.6.9 |
| CVE-2026-35472 | 6.1 | Apr 6 | WeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage'] Affected: < 3.6.9 |
| CVE-2026-35398 | 6.1 | Apr 6 | WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage'] Affected: < 3.6.9 |
| CVE-2026-35396 | 6.1 | Apr 6 | WeGIA - Open Redirect - IsaidaControle - listarId() - Unvalidated $_GET['nextPage'] Affected: < 3.6.9 |
| CVE-2026-33136 | 6.1 | Mar 20 | WeGIA has Reflected Cross-Site Scripting (XSS) in `listar_memorandos_ativos.php` via `sccd` parameter Affected: < 3.6.7 |
| CVE-2026-33135 | 6.1 | Mar 20 | WeGIA has Reflected Cross-Site Scripting (XSS) in `novo_memorandoo.php` via `sccs` parameter Affected: < 3.6.7 |
| CVE-2026-23730 | 6.1 | Jan 16 | WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle) Affected: < 3.6.2 |
| CVE-2026-23729 | 6.1 | Jan 16 | WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle) Affected: < 3.6.2 |
| CVE-2026-23728 | 6.1 | Jan 16 | WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle) Affected: < 3.6.2 |
| CVE-2026-23727 | 6.1 | Jan 16 | WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle) Affected: < 3.6.2 |
| CVE-2026-23726 | 6.1 | Jan 16 | WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle) Affected: < 3.6.2 |
| CVE-2026-23722 | 6.1 | Jan 16 | WeGIA has a Reflected Cross-Site Scripting (XSS) vulnerability allowing arbitrary code execution and UI redressing. Affected: < 3.6.2 |
| CVE-2025-62598 | 6.1 | Oct 21 | WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'action' Affected: < 3.5.1 |
| CVE-2025-62597 | 6.1 | Oct 21 | WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'sql' Affected: < 3.5.1 |
| CVE-2025-62361 | 6.1 | Oct 13 | WeGIA Open Redirect Vulnerability in `control.php` endpoint `nextPage` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle) Affected: < 3.5.0 |
| CVE-2025-62359 | 6.1 | Oct 13 | WeGIA Cross-Site Scripting (XSS) Reflected endpoint id_pet Affected: < 3.5.0 |
| CVE-2025-62358 | 6.1 | Oct 13 | WeGIA Reflected XSS to Account TakeOver at /html/configuracao/configuracao_geral.php via log parameter Affected: < 3.5.1 |
| CVE-2025-61606 | 6.1 | Oct 2 | WeGIA: Open Redirect Vulnerability in `control.php` endpoint Affected: < 3.5.0 |
| CVE-2025-58452 | 6.1 | Sep 8 | WeGIA vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint 'listar_despachos.php' parameter 'id_memorando' Affected: < 3.4.11 |
| CVE-2025-57763 | 6.1 | Aug 21 | Cross-Site Scripting (XSS) Reflected in 'insere_despacho.php' parameter 'sccs' Affected: < 3.4.7 |
| CVE-2025-57762 | 6.1 | Aug 21 | WeGIA Stored Cross-Site Scripting (XSS) vulnerability in the endpoint 'dependente_docdependente.php' with parameter 'nome' Affected: < 3.4.7 |
| CVE-2025-54078 | 6.1 | Jul 18 | WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao_imagem.php' parameter 'err' Affected: < 3.4.6 |
| CVE-2025-54077 | 6.1 | Jul 18 | WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao.php' parameter 'err' Affected: < 3.4.6 |
| CVE-2025-54076 | 6.1 | Jul 18 | WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'pre_cadastro_atendido.php' parameter 'msg_e' Affected: < 3.4.6 |
| CVE-2025-53936 | 6.1 | Jul 16 | WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `nome_car` Affected: < 3.4.5 |
| CVE-2025-53935 | 6.1 | Jul 16 | WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `id` Affected: < 3.4.5 |
| CVE-2025-53932 | 6.1 | Jul 16 | WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint 'cadastro_adotante.php' parameter 'cpf' Affected: < 3.4.5 |
| CVE-2025-53822 | 6.1 | Jul 14 | WeGIA vulnerable to Reflected Cross-Site Scripting in endpoint 'relatorio_geracao.php' parameter 'tipo_relatorio' Affected: < 3.4.5 |
| CVE-2025-53821 | 6.1 | Jul 14 | WeGIA vulnerable to Open Redirect in endpoint 'control.php' parameter 'nextPage' Affected: < 3.4.5 |
| CVE-2025-53820 | 6.1 | Jul 14 | WeGIA vulnerable to Cross-Site Scripting (XSS) Reflected via endpoint 'index.php' parameter 'erro' Affected: < 3.4.5 |
| CVE-2025-53526 | 6.1 | Jul 7 | WeGIA allows Stored XSS attacks in novo_memorando.php Affected: < 3.4.3 |
| CVE-2025-53525 | 6.1 | Jul 7 | WebGia allows Cross-Site Scripting (XSS) in profile_familiar.php via the id_dependente parameter Affected: < 3.4.3 |
| CVE-2025-53377 | 6.1 | Jul 7 | WebGia allows Cross-Site Scripting (XSS) in cadastro_dependente_pessoa_nova.php via the id_funcionario parameter Affected: < 3.4.3 |
| CVE-2025-27499 | 6.1 | Mar 3 | WeGIA has a stored Cross-Site Scripting (XSS) in 'processa_edicao_socio.php' via the 'socio_nome' parameter Affected: < 3.2.10 |
| CVE-2025-27417 | 6.1 | Mar 3 | WeGIA Contains a Stored Cross-Site Scripting (XSS) in 'adicionar_status_atendido.php' via the 'status' parameter Affected: < 3.2.16 |
| CVE-2025-24020 | 6.1 | Jan 21 | WeGIA Open Redirect vulnerability Affected: < 3.2.11 |
| CVE-2025-23030 | 6.1 | Jan 13 | Cross-Site Scripting (XSS) Reflected endpoint 'cadastro_funcionario.php' parameter 'cpf' in WeGIA Affected: < 3.2.6 |
| CVE-2025-23034 | 6.1 | Jan 13 | Cross-Site Scripting (XSS) Reflected endpoint 'tags.php' parameter 'msg_e' in WeGIA Affected: < 3.2.6 |
| CVE-2025-22615 | 6.1 | Jan 13 | WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf' Affected: < 3.2.6 |
| CVE-2025-22617 | 6.1 | Jan 13 | WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_socio.php' parameter 'socio' Affected: < 3.2.7 |
| CVE-2025-22619 | 6.1 | Jan 13 | WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_permissoes.php' parameter 'msg_c' Affected: < 3.2.6 |
| CVE-2025-22598 | 6.1 | Jan 10 | WeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'cadastrarSocio.php' parameter 'nome' Affected: < 3.2.8 |
| CVE-2025-22597 | 6.1 | Jan 10 | WeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'CobrancaController.php' parameter 'local_recepcao' Affected: < 3.2.8 |
