cvedb.io
CVE-2025-30366
MEDIUM · CVSS 5.4
EPSS exploitation probability: 0%
Published 2025-03-27T17:15:58.047 · Last modified 2026-06-17T09:08:35.597

Summary

WeGIA is a Web manager for charitable institutions. Versions prior to 3.2.8 are vulnerable to stored cross-site scripting. This vulnerability allows unauthorized scripts to be executed within the user's browser context. Stored XSS is particularly critical, as the malicious code is permanently stored on the server and executed whenever a compromised page is loaded, affecting all users accessing this page. Version 3.2.8 fixes the issue.

Affected products

wegia — wegia

Does this affect you?

Add your gear to cvedb and we'll alert you only when wegia ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.