CVE-2025-67496: WeGia is Vulnerable to XSS through id_pessoa Parameter on Password Configuration Page
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain a Stored Cross-Site Scripting (XSS) vulnerability in the /WeGIA/html/geral/configurarsenhas.php endpoint. The application does not sanitize user-controlled data before rendering it inside the employee selection dropdown. The application retrieves employee names from the database and injects them directly into HTML <option> elements without proper escaping. This issue is fixed in version 3.5.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WeGIAto a version that resolves this vulnerability.Fixed in 3.5.5
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67496?
CVE-2025-67496 is classified as a high severity vulnerability due to its potential for stored cross-site scripting (XSS) attacks.
How do I fix CVE-2025-67496?
To fix CVE-2025-67496, upgrade WeGIA to version 3.5.5 or later, where the vulnerability has been addressed.
What version of WeGIA is affected by CVE-2025-67496?
WeGIA versions 3.5.4 and below are affected by CVE-2025-67496.
What is the impact of CVE-2025-67496 on users?
CVE-2025-67496 allows an attacker to execute arbitrary JavaScript in the context of the user's browser, potentially leading to session hijacking or data theft.
Where does CVE-2025-67496 occur in WeGIA?
CVE-2025-67496 occurs in the /WeGIA/html/geral/configurar_senhas.php endpoint, which does not properly sanitize user input.