CVE-2025-6696: LabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scripting

Published Jun 26, 2025

Updated

A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been classified as problematic. Affected is an unknown function of the file /html/atendido/CadastroAtendido.php of the component Cadastro de Atendio. The manipulation of the argument Nome/Sobrenome leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This is a different issue than CVE-2025-22615. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

LabRedesCefetRJ WeGIA

WeGIA WeGIA=3.4.0

Event History

Jun 26, 2025

CVE Published

via MITRE·02:31 PM

Data Sourced

via MITRE·02:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Jul 9, 57515

Event

via FIRST·06:31 PM

Frequently Asked Questions

What is the severity of CVE-2025-6696?

CVE-2025-6696 is classified as a problematic vulnerability.

How do I fix CVE-2025-6696?

To fix CVE-2025-6696, it's recommended to sanitize and validate user inputs in the Cadastro de Atendido component.

What component is affected by CVE-2025-6696?

CVE-2025-6696 affects the Cadastro de Atendido component in LabRedesCefetRJ WeGIA version 3.4.0.

What type of vulnerability is CVE-2025-6696?

CVE-2025-6696 is a cross-site scripting (XSS) vulnerability.

What function is involved in CVE-2025-6696?

CVE-2025-6696 involves an unknown function of the file /html/atendido/Cadastro_Atendido.php.