CVE-2025-62178: WeGIA Cross-Site Scripting (XSS) Reflected endpoint '/html/atendido/cadastro_atendido_parentesco_pessoa_nova.php' parameter 'idatendido'
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a Reflected Cross-Site Scripting (XSS) vulnerability was identified in the /html/atendido/cadastroatendidoparentescopessoanova.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the idatendido parameter. This vulnerability is fixed in 3.5.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WeGIAto a version that resolves this vulnerability.Fixed in 3.5.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62178?
CVE-2025-62178 has been classified as a medium severity vulnerability due to its potential impact on user data integrity.
How do I fix CVE-2025-62178?
To fix CVE-2025-62178, upgrade the WeGIA application to version 3.5.1 or later.
What type of vulnerability is CVE-2025-62178?
CVE-2025-62178 is a Reflected Cross-Site Scripting (XSS) vulnerability.
What functionality is affected by CVE-2025-62178?
CVE-2025-62178 affects the /html/atendido/cadastro_atendido_parentesco_pessoa_nova.php endpoint in the WeGIA application.
Who is affected by CVE-2025-62178?
Users of the WeGIA application prior to version 3.5.1 are affected by CVE-2025-62178.