CVE-2025-57761

HIGH 8.8CVE-2025-57761 · Published 21/08/2025 · updated 17/06/2026

In short

CVE-2025-57761 is a HIGH (CVSS 8.8) vulnerability affecting wegia (wegia).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.3% of all vulnerabilities.
Fix: update to 3.4.10 or later.

Package	Affected versions	Patched versions
wegia wegia	`< 3.4.10`	`3.4.10`

Description

WeGIA is a Web manager for charitable institutions. Prior to 3.4.10, there is a SQL Injection vulnerability in the /html/funcionario/dependente_remover.php endpoint, specifically in the id_funcionario parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This vulnerability is fixed in 3.4.10.

References

LabRedesCefetRJ/WeGIA commit baec5c7 · Patch
LabRedesCefetRJ/WeGIA security advisory · Exploit

More vulnerabilities in wegia

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wegia

< 3.4.10

3.4.10

Description

More vulnerabilities in wegia

See all →