Known vulnerabilities in WeGIA - page 5

Vendor: LabReDeS
Software: WeGIA
Software CPE: cpe:2.3:a:labredes:wegia:*:*:*:*:*:*:*:*
Total vulnerabilities: 205
Public exploits: 12
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WeGIA WeGIA is affected by 205 known vulnerabilities: 47 high, 112 medium, 46 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127332 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33134
CWE-89 High
No
No
3.6.6 23.04.2026 SB20260423171
#VU127331 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-31896
CWE-89 High
No
No
3.6.6 23.04.2026 SB20260423171
#VU127329 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-31894
CWE-59 Low
No
No
3.6.6 23.04.2026 SB20260423171
#VU127326 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-31895
CWE-89 Medium
No
No
3.6.6 23.04.2026 SB20260423171
#VU127324 - PHP External Variable Modification
CVE-2026-28411
CWE-473 High
No
No
3.6.5 23.04.2026 SB20260423169
#VU127322 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-28409
CWE-78 High
No
No
3.6.5 23.04.2026 SB20260423169
#VU127320 - Missing Authentication for Critical Function
CVE-2026-28408
CWE-306 High
No
No
3.6.5 23.04.2026 SB20260423169
#VU127318 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-23724
CWE-79 Low
No
No
3.6.2 23.04.2026 SB20260423167
#VU127316 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-23725
CWE-79 Low
No
No
3.6.2 23.04.2026 SB20260423167
#VU127314 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-23726
CWE-601 Low
No
No
3.6.2 23.04.2026 SB20260423167
#VU127312 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-23727
CWE-601 Low
No
No
3.6.2 23.04.2026 SB20260423167
#VU127310 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-23728
CWE-601 Low
No
No
3.6.2 23.04.2026 SB20260423167
#VU127309 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-23729
CWE-601 Low
No
No
3.6.2 23.04.2026 SB20260423167
#VU127307 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-23730
CWE-601 Low
No
No
3.6.2 23.04.2026 SB20260423167
#VU127305 - Improper Restriction of Rendered UI Layers or Frames
CVE-2026-23731
CWE-1021 Low
No
No
3.6.2 23.04.2026 SB20260423167
#VU127303 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-23722
CWE-79 Medium
No
No
3.6.2 23.04.2026 SB20260423167
#VU127301 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-23723
CWE-89 Low
No
No
3.6.2 23.04.2026 SB20260423167
#VU127297 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-67501
CWE-89 Low
No
No
3.5.5 23.04.2026 SB20260423166
#VU127295 - Weak Password Requirements
CVE-2025-67497
CWE-521 Low
No
No
3.5.5 23.04.2026 SB20260423166
#VU127293 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-67496
CWE-79 Low
No
No
3.5.5 23.04.2026 SB20260423166


Showing elements 81 - 100 out of 205