WE
Product
WeGIA
by LabRedesCefetRJ · last CVE Oct 29, 2026
188
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 40High 51Medium 96Low 0
Watch

Add WeGIA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-22596
6.5
0%
Jan 10
WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint 'modulos_visiveis.php' parameter'msg_c'
Affected: < 3.2.8
CVE-2026-42870
6.4
0%
May 11
WeGIA: Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'
Affected: < 3.7.0
CVE-2026-40282
6.4
0%
Apr 17
WeGIA has stored XSS in intercorrencia_visualizar.php
Affected: < 3.6.10
CVE-2026-42872
6.1
0%
May 11
WeGIA: Reflected XSS in listar_arquivos_etapa.php
Affected: < 3.7.0
CVE-2026-35475
6.1
0%
Apr 6
WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect']
Affected: < 3.6.9
CVE-2026-35474
6.1
0%
Apr 6
WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect']
Affected: < 3.6.9
CVE-2026-35473
6.1
0%
Apr 6
WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage']
Affected: < 3.6.9
CVE-2026-35399
6.1
0%
Apr 6
WeGIA has Stored XSS in backup file names
Affected: < 3.6.9
CVE-2026-35472
6.1
0%
Apr 6
WeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage']
Affected: < 3.6.9
CVE-2026-35398
6.1
0%
Apr 6
WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage']
Affected: < 3.6.9
CVE-2026-35396
6.1
0%
Apr 6
WeGIA - Open Redirect - IsaidaControle - listarId() - Unvalidated $_GET['nextPage']
Affected: < 3.6.9
CVE-2026-33136
6.1
0%
Mar 20
WeGIA has Reflected Cross-Site Scripting (XSS) in `listar_memorandos_ativos.php` via `sccd` parameter
Affected: < 3.6.7
CVE-2026-33135
6.1
0%
Mar 20
WeGIA has Reflected Cross-Site Scripting (XSS) in `novo_memorandoo.php` via `sccs` parameter
Affected: < 3.6.7
CVE-2026-23730
6.1
0%
Jan 16
WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)
Affected: < 3.6.2
CVE-2026-23729
6.1
0%
Jan 16
WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)
Affected: < 3.6.2
CVE-2026-23728
6.1
0%
Jan 16
WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)
Affected: < 3.6.2
CVE-2026-23727
6.1
0%
Jan 16
WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)
Affected: < 3.6.2
CVE-2026-23726
6.1
0%
Jan 16
WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)
Affected: < 3.6.2
CVE-2026-23722
6.1
0%
Jan 16
WeGIA has a Reflected Cross-Site Scripting (XSS) vulnerability allowing arbitrary code execution and UI redressing.
Affected: < 3.6.2
CVE-2025-62598
6.1
0%
Oct 21
WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'action'
Affected: < 3.5.1
CVE-2025-62597
6.1
0%
Oct 21
WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'sql'
Affected: < 3.5.1
CVE-2025-62361
6.1
0%
Oct 13
WeGIA Open Redirect Vulnerability in `control.php` endpoint `nextPage` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle)
Affected: < 3.5.0
CVE-2025-62359
6.1
0%
Oct 13
WeGIA Cross-Site Scripting (XSS) Reflected endpoint id_pet
Affected: < 3.5.0
CVE-2025-62358
6.1
0%
Oct 13
WeGIA Reflected XSS to Account TakeOver at /html/configuracao/configuracao_geral.php via log parameter
Affected: < 3.5.1
CVE-2025-61606
6.1
0%
Oct 2
WeGIA: Open Redirect Vulnerability in `control.php` endpoint
Affected: < 3.5.0
CVE-2025-58452
6.1
0%
Sep 8
WeGIA vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint 'listar_despachos.php' parameter 'id_memorando'
Affected: < 3.4.11
CVE-2025-57763
6.1
0%
Aug 21
Cross-Site Scripting (XSS) Reflected in 'insere_despacho.php' parameter 'sccs'
Affected: < 3.4.7
CVE-2025-57762
6.1
0%
Aug 21
WeGIA Stored Cross-Site Scripting (XSS) vulnerability in the endpoint 'dependente_docdependente.php' with parameter 'nome'
Affected: < 3.4.7
CVE-2025-54078
6.1
0%
Jul 18
WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao_imagem.php' parameter 'err'
Affected: < 3.4.6
CVE-2025-54077
6.1
0%
Jul 18
WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao.php' parameter 'err'
Affected: < 3.4.6
CVE-2025-54076
6.1
0%
Jul 18
WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'pre_cadastro_atendido.php' parameter 'msg_e'
Affected: < 3.4.6
CVE-2025-53936
6.1
0%
Jul 16
WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `nome_car`
Affected: < 3.4.5
CVE-2025-53935
6.1
0%
Jul 16
WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `id`
Affected: < 3.4.5
CVE-2025-53932
6.1
0%
Jul 16
WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint 'cadastro_adotante.php' parameter 'cpf'
Affected: < 3.4.5
CVE-2025-53822
6.1
0%
Jul 14
WeGIA vulnerable to Reflected Cross-Site Scripting in endpoint 'relatorio_geracao.php' parameter 'tipo_relatorio'
Affected: < 3.4.5
CVE-2025-53821
6.1
0%
Jul 14
WeGIA vulnerable to Open Redirect in endpoint 'control.php' parameter 'nextPage'
Affected: < 3.4.5
CVE-2025-53820
6.1
0%
Jul 14
WeGIA vulnerable to Cross-Site Scripting (XSS) Reflected via endpoint 'index.php' parameter 'erro'
Affected: < 3.4.5
CVE-2025-53526
6.1
0%
Jul 7
WeGIA allows Stored XSS attacks in novo_memorando.php
Affected: < 3.4.3
CVE-2025-53525
6.1
0%
Jul 7
WebGia allows Cross-Site Scripting (XSS) in profile_familiar.php via the id_dependente parameter
Affected: < 3.4.3
CVE-2025-53377
6.1
0%
Jul 7
WebGia allows Cross-Site Scripting (XSS) in cadastro_dependente_pessoa_nova.php via the id_funcionario parameter
Affected: < 3.4.3
CVE-2025-27499
6.1
0%
Mar 3
WeGIA has a stored Cross-Site Scripting (XSS) in 'processa_edicao_socio.php' via the 'socio_nome' parameter
Affected: < 3.2.10
CVE-2025-27417
6.1
0%
Mar 3
WeGIA Contains a Stored Cross-Site Scripting (XSS) in 'adicionar_status_atendido.php' via the 'status' parameter
Affected: < 3.2.16
CVE-2025-24020
6.1
0%
Jan 21
WeGIA Open Redirect vulnerability
Affected: < 3.2.11
CVE-2025-23030
6.1
0%
Jan 13
Cross-Site Scripting (XSS) Reflected endpoint 'cadastro_funcionario.php' parameter 'cpf' in WeGIA
Affected: < 3.2.6
CVE-2025-23034
6.1
0%
Jan 13
Cross-Site Scripting (XSS) Reflected endpoint 'tags.php' parameter 'msg_e' in WeGIA
Affected: < 3.2.6
CVE-2025-22615
6.1
0%
Jan 13
WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'
Affected: < 3.2.6
CVE-2025-22617
6.1
0%
Jan 13
WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_socio.php' parameter 'socio'
Affected: < 3.2.7
CVE-2025-22619
6.1
0%
Jan 13
WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_permissoes.php' parameter 'msg_c'
Affected: < 3.2.6
CVE-2025-22598
6.1
0%
Jan 10
WeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'cadastrarSocio.php' parameter 'nome'
Affected: < 3.2.8
CVE-2025-22597
6.1
0%
Jan 10
WeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'CobrancaController.php' parameter 'local_recepcao'
Affected: < 3.2.8
Page 3 of 4 · 188 total