Known vulnerabilities in WeGIA - page 4

Vendor: LabReDeS
Software: WeGIA
Software CPE: cpe:2.3:a:labredes:wegia:*:*:*:*:*:*:*:*
Total vulnerabilities: 205
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WeGIA WeGIA is affected by 205 known vulnerabilities: 47 high, 112 medium, 46 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129063 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53929
CWE-79 Medium
No
No
3.4.5 02.05.2026 SB2026043092
#VU129057 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53930
CWE-79 Medium
No
No
3.4.5 02.05.2026 SB2026043092
#VU129056 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53931
CWE-79 Medium
No
No
3.4.5 02.05.2026 SB2026043092
#VU129030 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53932
CWE-79 Medium
No
No
3.4.5 02.05.2026 SB2026043092
#VU128698 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53822
CWE-79 Medium
No
No
3.4.5 30.04.2026 SB2026043092
#VU128697 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-53821
CWE-601 Medium
No
No
3.4.5 30.04.2026 SB2026043092
#VU128695 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53820
CWE-79 Medium
No
No
3.4.5 30.04.2026 SB2026043092
#VU128690 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-57763
CWE-79 Medium
No
No
3.4.7 30.04.2026 SB2026043091
#VU128679 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-57762
CWE-79 Medium
No
No
3.4.7 30.04.2026 SB2026043091
#VU128677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-57764
CWE-79 Medium
No
No
3.4.7 30.04.2026 SB2026043091
#VU128676 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-57765
CWE-79 Medium
No
No
3.4.7 30.04.2026 SB2026043091
#VU128674 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-55168
CWE-89 Medium
No
No
3.4.8 30.04.2026 SB2026043089
#VU128673 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-55169
CWE-22 High
No
No
3.4.8 30.04.2026 SB2026043089
#VU128672 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-55167
CWE-89 Medium
No
No
3.4.8 30.04.2026 SB2026043089
#VU128671 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-57761
CWE-89 Medium
No
No
3.4.10 30.04.2026 SB2026043090
#VU128670 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-55170
CWE-79 Medium
No
No
3.4.8 30.04.2026 SB2026043089
#VU128669 - Improper Authentication
CVE-2025-55171
CWE-287 Medium
No
No
3.4.8 30.04.2026 SB2026043089
#VU128706 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-30366
CWE-79 Low
No
No
3.2.8 27.03.2025 SB20250327163
#VU128707 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-30365
CWE-89 Medium
No
No
3.2.8 27.03.2025 SB20250327163
#VU128708 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-30364
CWE-89 High
No
No
3.2.8 27.03.2025 SB20250327163


Showing elements 61 - 80 out of 205