CVE-2025-24958

Summary

CVE-2025-24958: A critical SQL Injection vulnerability was identified in the `salvar_tag.php` endpoint of the WeGIA application. This weakness enables attackers with authorized access to execute arbitrary SQL queries, potentially resulting in the exposure or deletion of sensitive data. WeGIA users are urged to upgrade to version 3.2.12 to mitigate this risk, as no known workarounds exist to address this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.