WE
Product
WeGIA
by LabRedesCefetRJ · last CVE Oct 29, 2026
188
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 40High 51Medium 96Low 0
Watch

Add WeGIA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42871
6.9
0%
May 11
WeGIA: Error Handling familiar_docfamiliar
Affected: < 3.7.0
CVE-2026-45026
6.8
0%
May 11
WeGIA: Stored XSS in html/atendido/processo_aceitacao.php
Affected: < 3.7.3
CVE-2026-45025
6.8
0%
May 11
WeGIA: Stored XSS in html/atendido/etapa_processo.php
Affected: < 3.7.3
CVE-2026-40284
6.8
0%
Apr 17
WeGIA has stored XSS in listar_despachos.php
Affected: < 3.6.10
CVE-2026-55679
6.5
1%
Oct 14
WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection
Affected: < 3.8.6
CVE-2026-76634
6.5
0%
Aug 20
WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php
Affected: before 3.9.2
CVE-2025-55169
6.5
2%
Aug 12
WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'
Affected: < 3.4.8
CVE-2025-22600
6.5
0%
Jan 10
WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `configuracao_doacao.php` parameter `avulso`
Affected: < 3.2.8
CVE-2025-22599
6.5
0%
Jan 10
WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `home.php` parameter `msg_c`
Affected: < 3.2.8
CVE-2025-22596
6.5
0%
Jan 10
WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint 'modulos_visiveis.php' parameter'msg_c'
Affected: < 3.2.8
CVE-2026-42870
6.4
0%
May 11
WeGIA: Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'
Affected: < 3.7.0
CVE-2026-40282
6.4
0%
Apr 17
WeGIA has stored XSS in intercorrencia_visualizar.php
Affected: < 3.6.10
CVE-2026-42872
6.1
0%
May 11
WeGIA: Reflected XSS in listar_arquivos_etapa.php
Affected: < 3.7.0
CVE-2026-35475
6.1
0%
Apr 6
WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect']
Affected: < 3.6.9
CVE-2026-35474
6.1
0%
Apr 6
WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect']
Affected: < 3.6.9
CVE-2026-35473
6.1
0%
Apr 6
WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage']
Affected: < 3.6.9
CVE-2026-35399
6.1
0%
Apr 6
WeGIA has Stored XSS in backup file names
Affected: < 3.6.9
CVE-2026-35472
6.1
0%
Apr 6
WeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage']
Affected: < 3.6.9
CVE-2026-35398
6.1
0%
Apr 6
WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage']
Affected: < 3.6.9
CVE-2026-35396
6.1
0%
Apr 6
WeGIA - Open Redirect - IsaidaControle - listarId() - Unvalidated $_GET['nextPage']
Affected: < 3.6.9
CVE-2026-33136
6.1
0%
Mar 20
WeGIA has Reflected Cross-Site Scripting (XSS) in `listar_memorandos_ativos.php` via `sccd` parameter
Affected: < 3.6.7
CVE-2026-33135
6.1
0%
Mar 20
WeGIA has Reflected Cross-Site Scripting (XSS) in `novo_memorandoo.php` via `sccs` parameter
Affected: < 3.6.7
CVE-2026-23730
6.1
0%
Jan 16
WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)
Affected: < 3.6.2
CVE-2026-23729
6.1
0%
Jan 16
WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)
Affected: < 3.6.2
CVE-2026-23728
6.1
0%
Jan 16
WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)
Affected: < 3.6.2
CVE-2026-23727
6.1
0%
Jan 16
WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)
Affected: < 3.6.2
CVE-2026-23726
6.1
0%
Jan 16
WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)
Affected: < 3.6.2
CVE-2026-23722
6.1
0%
Jan 16
WeGIA has a Reflected Cross-Site Scripting (XSS) vulnerability allowing arbitrary code execution and UI redressing.
Affected: < 3.6.2
CVE-2025-62598
6.1
0%
Oct 21
WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'action'
Affected: < 3.5.1
CVE-2025-62597
6.1
0%
Oct 21
WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'sql'
Affected: < 3.5.1
CVE-2025-62361
6.1
0%
Oct 13
WeGIA Open Redirect Vulnerability in `control.php` endpoint `nextPage` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle)
Affected: < 3.5.0
CVE-2025-62359
6.1
0%
Oct 13
WeGIA Cross-Site Scripting (XSS) Reflected endpoint id_pet
Affected: < 3.5.0
CVE-2025-62358
6.1
0%
Oct 13
WeGIA Reflected XSS to Account TakeOver at /html/configuracao/configuracao_geral.php via log parameter
Affected: < 3.5.1
CVE-2025-61606
6.1
0%
Oct 2
WeGIA: Open Redirect Vulnerability in `control.php` endpoint
Affected: < 3.5.0
CVE-2025-58452
6.1
0%
Sep 8
WeGIA vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint 'listar_despachos.php' parameter 'id_memorando'
Affected: < 3.4.11
CVE-2025-57763
6.1
0%
Aug 21
Cross-Site Scripting (XSS) Reflected in 'insere_despacho.php' parameter 'sccs'
Affected: < 3.4.7
CVE-2025-57762
6.1
0%
Aug 21
WeGIA Stored Cross-Site Scripting (XSS) vulnerability in the endpoint 'dependente_docdependente.php' with parameter 'nome'
Affected: < 3.4.7
CVE-2025-54078
6.1
0%
Jul 18
WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao_imagem.php' parameter 'err'
Affected: < 3.4.6
CVE-2025-54077
6.1
0%
Jul 18
WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao.php' parameter 'err'
Affected: < 3.4.6
CVE-2025-54076
6.1
0%
Jul 18
WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'pre_cadastro_atendido.php' parameter 'msg_e'
Affected: < 3.4.6
CVE-2025-53936
6.1
0%
Jul 16
WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `nome_car`
Affected: < 3.4.5
CVE-2025-53935
6.1
0%
Jul 16
WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `id`
Affected: < 3.4.5
CVE-2025-53932
6.1
0%
Jul 16
WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint 'cadastro_adotante.php' parameter 'cpf'
Affected: < 3.4.5
CVE-2025-53822
6.1
0%
Jul 14
WeGIA vulnerable to Reflected Cross-Site Scripting in endpoint 'relatorio_geracao.php' parameter 'tipo_relatorio'
Affected: < 3.4.5
CVE-2025-53821
6.1
0%
Jul 14
WeGIA vulnerable to Open Redirect in endpoint 'control.php' parameter 'nextPage'
Affected: < 3.4.5
CVE-2025-53820
6.1
0%
Jul 14
WeGIA vulnerable to Cross-Site Scripting (XSS) Reflected via endpoint 'index.php' parameter 'erro'
Affected: < 3.4.5
CVE-2025-53526
6.1
0%
Jul 7
WeGIA allows Stored XSS attacks in novo_memorando.php
Affected: < 3.4.3
CVE-2025-53525
6.1
0%
Jul 7
WebGia allows Cross-Site Scripting (XSS) in profile_familiar.php via the id_dependente parameter
Affected: < 3.4.3
CVE-2025-53377
6.1
0%
Jul 7
WebGia allows Cross-Site Scripting (XSS) in cadastro_dependente_pessoa_nova.php via the id_funcionario parameter
Affected: < 3.4.3
CVE-2025-27499
6.1
0%
Mar 3
WeGIA has a stored Cross-Site Scripting (XSS) in 'processa_edicao_socio.php' via the 'socio_nome' parameter
Affected: < 3.2.10
Page 1 of 2 · 96 total