CVE-2025-22596

Summary

CVE-2025-22596: A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the modulos_visiveis.php endpoint of the WeGIA web management application for charitable institutions. This issue enables attackers to inject malicious scripts into the msg_c parameter, potentially stealing user data or gaining unauthorized access. The vulnerability is resolved in version 3.2.8.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.