CVE-2025-53526: Wegia

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

WeGIA is a web manager for charitable institutions. An XSS Injection vulnerability was identified in novo_memorando.php. After the memo was submitted, the vulnerability was confirmed by accessing listar_memorandos_antigos.php. Upon loading this page, the injected script was executed in the browser. This vulnerability is fixed in 3.4.3.

Affected products

• Wegia Wegia: before 3.4.3 (fixed in 3.4.3)

Published 2025-07-07. Last modified 2026-06-17.