CVE-2025-30366

Summary

CVE-2025-30366 is a stored cross-site scripting (XSS) vulnerability affecting versions of WeGIA, a web management system for charitable institutions, prior to 3.2.8. This issue enables unauthorized scripts to be injected and permanently stored on the server. As a result, when a compromised page is loaded, all users accessing that page are at risk of having malicious code executed within their browser context. The severe implications of a stored XSS vulnerability make it a critical threat, which is resolved in version 3.2.8 of the WeGIA software.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.