| Package | Affected versions | Patched versions |
|---|---|---|
| wegia | < 3.5.1 | 3.5.1 |
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, the log parameter in configuracao_geral.php is vulnerable to Reflected Cross-Site Scripting (XSS). An attacker can inject arbitrary JavaScript, which executes in the victim’s browser. This vulnerability is fixed in 3.5.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free