CVE-2025-6694: LabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross site scripting

Published Jun 26, 2025

Updated

A vulnerability has been found in LabRedesCefetRJ WeGIA 3.4.0 and classified as problematic. This vulnerability affects unknown code of the file /html/matPat/adicionarunidade.php of the component Adicionar Unidade. The manipulation of the argument Insira a nova unidade leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

LabRedesCefetRJ WeGIA

WeGIA WeGIA=3.4.0

Event History

Jun 26, 2025

CVE Published

via MITRE·01:31 PM

Data Sourced

via MITRE·01:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Jun 12, 58473

Event

via NVD·10:31 AM

Frequently Asked Questions

What is the severity of CVE-2025-6694?

CVE-2025-6694 is classified as a problematic vulnerability that could lead to cross-site scripting (XSS).

How do I fix CVE-2025-6694?

To fix CVE-2025-6694, you should sanitize and validate input data in the /html/matPat/adicionar_unidade.php file to prevent XSS attacks.

What component is affected by CVE-2025-6694?

CVE-2025-6694 affects the Adicionar Unidade component of LabRedesCefetRJ WeGIA version 3.4.0.

What code does CVE-2025-6694 target?

CVE-2025-6694 targets unknown code in the /html/matPat/adicionar_unidade.php file.

Is CVE-2025-6694 exploitable remotely?

Yes, CVE-2025-6694 can be exploited remotely through malicious input to the application.