Known vulnerabilities in WeGIA - page 6

Vendor: LabReDeS
Software: WeGIA
Software CPE: cpe:2.3:a:labredes:wegia:*:*:*:*:*:*:*:*
Total vulnerabilities: 205
Public exploits: 12
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WeGIA WeGIA is affected by 205 known vulnerabilities: 47 high, 112 medium, 46 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128675 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-59939
CWE-89 Medium
No
No
3.5.0 30.04.2026 SB20260423164
#VU128668 - Unrestricted Upload of File with Dangerous Type
CVE-2025-58745
CWE-434 Medium
No
No
3.4.11 30.04.2026 SB20260423165
#VU128667 - Unrestricted Upload of File with Dangerous Type
CVE-2025-58159
CWE-434 Medium
No
No
3.4.11 30.04.2026 SB20260423165
#VU127299 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
3.5.5 23.04.2026 SB20260423166
#VU127291 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-58454
CWE-89 Low
No
No
3.4.11 23.04.2026 SB20260423165
#VU127289 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-58453
CWE-89 Low
No
No
3.4.11 23.04.2026 SB20260423165
#VU127286 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-58452
CWE-79 Medium
No
No
3.4.11 23.04.2026 SB20260423165
#VU127284 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-61603
CWE-89 Medium
No
No
3.5.0 23.04.2026 SB20260423164
#VU127282 - Cross-Site Request Forgery (CSRF)
CVE-2025-61604
CWE-352 Low
No
No
3.5.0 23.04.2026 SB20260423164
#VU127280 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-61605
CWE-89 Medium
No
No
3.5.0 23.04.2026 SB20260423164
#VU127278 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-62361
CWE-601 Low
No
No
3.5.0 23.04.2026 SB20260423164
#VU127276 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-61606
CWE-601 Low
No
No
3.5.0 23.04.2026 SB20260423164
#VU127275 - Improper Authentication
CVE-2025-61665
CWE-287 Medium
No
No
3.5.0 23.04.2026 SB20260423164
#VU127266 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2025-62597
CWE-80 Medium
No
No
3.5.1 23.04.2026 SB20260423163
#VU127264 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62179
CWE-89 Low
No
No
3.5.1 23.04.2026 SB20260423163
#VU127262 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-62178
CWE-79 Low
No
No
3.5.1 23.04.2026 SB20260423163
#VU127259 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62177
CWE-89 Low
No
No
3.5.1 23.04.2026 SB20260423163
#VU127257 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-62359
CWE-79 Medium
No
No
3.5.0 23.04.2026 SB20260423164
#VU127255 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62360
CWE-89 High
No
No
3.5.1 23.04.2026 SB20260423163
#VU127253 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
3.5.1 23.04.2026 SB20260423163


Showing elements 101 - 120 out of 205