Executive Summary

This vulnerability is a reflected cross-site scripting (XSS) issue in the WeGIA application prior to version 3.5.1. It occurs in the editar_info_pessoal.php endpoint, where attackers can inject malicious scripts through the 'action' parameter in a GET request. This allows the attacker to execute arbitrary scripts in the context of the victim's browser when they visit a crafted URL.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can allow attackers to execute malicious scripts in users' browsers, potentially leading to theft of sensitive information such as cookies or session tokens, unauthorized actions on behalf of the user, or distribution of malware. This can compromise user accounts and the security of the affected application.

Useful 0 Not Useful 0

Mitigation Strategies

The immediate step to mitigate this vulnerability is to upgrade the WeGIA application to version 3.5.1 or later, where the reflected XSS vulnerability in the editar_info_pessoal.php endpoint has been patched.

Useful 0 Not Useful 0