WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_socio.php' parameter 'socio'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the `editar_socio.php` endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the `socio` parameter. The application fails to validate and sanitize user inputs in the `socio` parameter. This lack of validation permits the injection of malicious payloads, which are reflected back to the user's browser in the server's response and executed within the context of the victim's browser. This issue has been addressed in version 3.2.7 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

WeGIA 跨站脚本漏洞

WeGIA是Nilson Lazarin个人开发者的一个福利机构的网络管理器。 WeGIA存在跨站脚本漏洞，该漏洞源于输入验证和清理不当，允许攻击者注入恶意脚本，这些恶意负载被服务器响应反射回用户的浏览器，并在受害者浏览器的上下文中执行。

N/A

N/A