Login Request a demo
WE
Product
WeGIA
by LabRedesCefetRJ · last CVE Oct 14, 2026
187
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Vulnerabilities187In the news0Timeline
Severity mix
Critical 40High 50Medium 96Low 0
Severity
All severities187Critical40High50Medium96Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WeGIA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45027
5.9
0%
May 27
WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php
Affected: < 3.7.3
CVE-2026-45335
5.4
0%
May 27
WeGIA: Middleware whitelist bypass → open redirect via InternoControle.nextPage
Affected: < 3.7.3
CVE-2026-23725
5.4
0%
Jan 16
WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page
Affected: < 3.6.2
CVE-2026-23724
5.4
0%
Jan 16
WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page
Affected: < 3.6.2
CVE-2025-67496
5.4
0%
Dec 9
WeGia is Vulnerable to XSS through id_pessoa Parameter on Password Configuration Page
Affected: < 3.5.5
CVE-2025-62178
5.4
0%
Oct 13
WeGIA Cross-Site Scripting (XSS) Reflected endpoint '/html/atendido/cadastro_atendido_parentesco_pessoa_nova.php' parameter 'idatendido'
Affected: < 3.5.1
CVE-2025-53934
5.4
0%
Jul 16
WeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'control.php' parameter 'descricao_emergencia'
Affected: < 3.4.5
CVE-2025-53933
5.4
0%
Jul 16
WeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'adicionar_enfermidade.php' parameter 'nome'
Affected: < 3.4.5
CVE-2025-53931
5.4
0%
Jul 16
WeGIA vulnerable to Stored Cross-Site Scripting via endpoint `adicionar_raca.php` parameter `raca`
Affected: < 3.4.5
CVE-2025-53930
5.4
0%
Jul 16
WeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint 'adicionar_especie.php' parameter 'especie'
Affected: < 3.4.5
CVE-2025-53929
5.4
0%
Jul 16
WeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint `adicionar_cor.php` parameter `cor`
Affected: < 3.4.5
CVE-2025-53824
5.4
0%
Jul 14
WeGIA ReflectedCross-Site Scripting (XSS) vulnerability in endpoint 'cadastro_pet.php' parameter 'msg'
Affected: < 3.4.4
CVE-2025-30366
5.4
0%
Mar 27
WeGIA vulnerable to Stored XSS in personalizacao.php
Affected: < 3.2.8
CVE-2025-30363
5.4
0%
Mar 27
WeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter dados_addInfo
Affected: < 3.2.6
CVE-2025-30362
5.4
0%
Mar 27
WeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter id
Affected: < 3.2.8
CVE-2025-29782
5.4
0%
Mar 14
WeGIA Cross-Site Scripting (XSS) Stored in endpoint `adicionar_tipo_docs_atendido.php` parameter `tipo`
Affected: < 3.2.17
CVE-2025-27420
5.4
0%
Mar 3
WeGIA contains a Stored Cross-Site Scripting (XSS) in 'atendido_parentesco_adicionar.php' via the 'descricao' parameter
Affected: < 3.2.16
CVE-2025-27418
5.4
0%
Mar 3
WeGIA contains a Stored Cross-Site Scripting (XSS) in 'adicionar_tipo_atendido.php' via the 'tipo' parameter
Affected: < 3.2.16
CVE-2025-23038
5.4
0%
Jan 13
Cross-Site Scripting (XSS) Stored endpoint 'remuneracao.php ' parameter 'descricao' in WeGIA
Affected: < 3.2.6
CVE-2025-23031
5.4
0%
Jan 13
Cross-Site Scripting (XSS) Stored endpoint 'adicionar_alergia.php' parameter 'nome' in WeGIA
Affected: < 3.2.6
CVE-2025-23032
5.4
0%
Jan 13
Cross-Site Scripting (XSS) Stored endpoint 'adicionar_escala.php' parameter 'escala' in WeGIA
Affected: < 3.2.6
CVE-2025-23033
5.4
0%
Jan 13
Cross-Site Scripting (XSS) Stored endpoint 'adicionar_situacao.php' parameter 'situacao' in WeGIA
Affected: < 3.2.6
CVE-2025-23035
5.4
0%
Jan 13
Cross-Site Scripting (XSS) Stored endpoint 'adicionar_tipo_quadro_horario.php' parameter 'tipo' in WeGIA
Affected: < 3.2.6
CVE-2025-23036
5.4
0%
Jan 13
Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_funcionario.php' parameter 'msg_e' in WeGIA
Affected: < 3.2.7
CVE-2025-23037
5.4
0%
Jan 13
Cross-Site Scripting (XSS) Stored endpoint 'control.php' parameter 'cargo' in WeGIA
Affected: < 3.2.6
CVE-2025-22613
5.4
0%
Jan 13
WeGIA Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'
Affected: < 3.2.6
CVE-2025-22614
5.4
0%
Jan 13
WeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_editarInfoPessoal.php ' parameters 'nome' 'SobrenomeForm'
Affected: < 3.2.6
CVE-2025-22616
5.4
0%
Jan 13
WeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_parentesco_adicionar.php' parameter 'descricao'
Affected: < 3.2.6
CVE-2025-22618
5.4
0%
Jan 13
WeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'
Affected: < 3.2.6
CVE-2026-23731
4.3
0%
Jan 16
WeGIA Clickjacking Vulnerability
Affected: < 3.6.2
CVE-2025-6699
4.1
0%
Jun 26
LabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scripting
Affected: 3.4.0
CVE-2025-6698
4.1
0%
Jun 26
LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scripting
Affected: 3.4.0
CVE-2025-6697
4.1
0%
Jun 26
LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scripting
Affected: 3.4.0
CVE-2025-6696
4.1
0%
Jun 26
LabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scripting
Affected: 3.4.0
CVE-2025-6695
4.1
0%
Jun 26
LabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scripting
Affected: 3.4.0
CVE-2025-6694
4.1
0%
Jun 26
LabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross site scripting
Affected: 3.4.0
CVE-2026-42873
0.0
0%
May 11
WeGIA: Error Handling Upload DocDependente
Affected: < 3.6.10
Page 4 of 4 · 187 total
1…34