CVE-2025-62360: Wegia

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/dependente_documento.php endpoint, specifically in the id_dependente parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This vulnerability is fixed in 3.5.1.

Affected products

• Wegia Wegia: before 3.5.1 (fixed in 3.5.1)

Published 2025-10-13. Last modified 2026-10-08.