CVE-2025-53929

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `adicionar_cor.php` endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers to inject malicious scripts into the `cor` parameter. The injected scripts are stored on the server and executed automatically whenever the affected page `cadastro_pet.php` is accessed by users, posing a significant security risk. Version 3.4.5 fixes the issue.

• CWE-79

• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-mrwj-rf3q-3rqjExploit, Vendor Advisory
• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-mrwj-rf3q-3rqjExploit, Vendor Advisory

Published

Jul 16, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53923Emlog is an open source website building system. A cross-sit…6.1
• CVE-2025-53924Emlog is an open source website building system. A cross-sit…4.8
• CVE-2025-53925Emlog is an open source website building system. A cross-sit…5.4
• CVE-2025-53926Emlog is an open source website building system. A cross-sit…6.1
• CVE-2025-53927MaxKB is an open-source AI assistant for enterprise. Prior t…6.3
• CVE-2025-53928MaxKB is an open-source AI assistant for enterprise. Prior t…9.8
• CVE-2025-5393The Alone – Charity Multipurpose Non-profit WordPress Theme …9.1
• CVE-2025-53930WeGIA is an open source web manager with a focus on the Port…5.4
• CVE-2025-53931WeGIA is an open source web manager with a focus on the Port…5.4
• CVE-2025-53932WeGIA is an open source web manager with a focus on the Port…6.1
• CVE-2025-53933WeGIA is an open source web manager with a focus on the Port…5.4
• CVE-2025-53934WeGIA is an open source web manager with a focus on the Port…5.4