| Package | Affected versions | Patched versions |
|---|---|---|
| wegia | < 3.5.0 | 3.5.0 |
WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an Open Redirect vulnerability, identified in the control.php endpoint, specifically in the nextPage parameter (metodo=listarUmnomeClasse=FuncionarioControle). This vulnerability allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or user credential theft. This issue is fixed in version 3.5.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free