Known vulnerabilities in WeGIA - page 3

Vendor: LabReDeS
Software: WeGIA
Software CPE: cpe:2.3:a:labredes:wegia:*:*:*:*:*:*:*:*
Total vulnerabilities: 205
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WeGIA WeGIA is affected by 205 known vulnerabilities: 47 high, 112 medium, 46 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129038 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53824
CWE-79 Medium
No
No
3.4.4 02.05.2026 SB2026043098
#VU128704 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
3.4.4 30.04.2026 SB2026043098
#VU128703 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-46828
CWE-89 High
No
No
3.3.1 30.04.2026 SB2026043097
#VU128702 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-53091
CWE-89 High
No
No
3.4.0 30.04.2026 SB2026043096
#VU128701 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-53527
CWE-89 Low
No
No
3.4.1 30.04.2026 SB2026043095
#VU128700 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-52474
CWE-89 Low
No
No
3.4.2 30.04.2026 SB2026043094
#VU128699 - Command injection
CVE-2025-50201
CWE-77 High
No
No
3.4.2 30.04.2026 SB2026043094
#VU128696 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-53529
CWE-89 High
No
No
3.4.3 30.04.2026 SB2026043093
#VU128694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53526
CWE-79 Medium
No
No
3.4.3 30.04.2026 SB2026043093
#VU128693 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-53946
CWE-89 Medium
No
No
3.4.5 30.04.2026 SB2026043092
#VU128692 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53525
CWE-79 Medium
No
No
3.4.3 30.04.2026 SB2026043093
#VU128691 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53377
CWE-79 Medium
No
No
3.4.3 30.04.2026 SB2026043093
#VU128689 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-53823
CWE-89 High
No
No
3.4.5 30.04.2026 SB2026043092
#VU128688 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53933
CWE-79 Medium
No
No
3.4.5 30.04.2026 SB2026043092
#VU128687 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53934
CWE-79 Medium
No
No
3.4.5 30.04.2026 SB2026043092
#VU128686 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53935
CWE-79 Medium
No
No
3.4.5 30.04.2026 SB2026043092
#VU128685 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53936
CWE-79 Medium
No
No
3.4.5 30.04.2026 SB2026043092
#VU128684 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-53937
CWE-89 Medium
No
No
3.4.5 30.04.2026 SB2026043092
#VU128683 - Missing Authentication for Critical Function
CVE-2025-53938
CWE-306 Medium
No
No
3.4.5 30.04.2026 SB2026043092
#VU129069 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22132
CWE-79 Medium
No
No
3.2.7 07.01.2025 SB2025010758


Showing elements 41 - 60 out of 205