Security Advisory

CVE-2025-62358

5.4
MEDIUM

Vulnerability Description

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, the log parameter in configuracao_geral.php is vulnerable to Reflected Cross-Site Scripting (XSS). An attacker can inject arbitrary JavaScript, which executes in the victim’s browser. This vulnerability is fixed in 3.5.1.
Published Date October 13, 2025
Official Source NIST NVD Advisory